92122 matches found
deadair v0.4.0
Open-source SIEM detection health. Find enabled detections that are blind because their telemetry is missing, stale, late, or schema-incompatible. Runs locally · Read-only · No agent · No telemetry upload Read the technical write-up · Featured in Detection Engineering Weekly Real scan of a...
CVE-2026-64807: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration...
CVE-2026-50039: Stack-based Buffer Overflow
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a Read Request...
CVE-2026-65487: Missing Authorization
Unauthenticated Broken Access Control in Photography = 7.7.6 versions...
CVE-2026-65467: Server-Side Request Forgery (SSRF)
Contributor Server Side Request Forgery SSRF in JetEngine = 3.8.11 versions...
CVE-2026-59541: Incorrect Privilege Assignment
Subscriber Privilege Escalation in WP BASE Booking = 6.3.1 versions...
CVE-2026-65452: Missing Authorization
Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...
CVE-2026-64806: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured Node.js interpreter...
CVE-2026-65514: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Appointment Hour Booking = 1.5.86 versions...
CVE-2026-57370: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.9.1 versions...
CVE-2026-24537: Cross-Site Request Forgery (CSRF)
Unauthenticated Cross Site Request Forgery CSRF in WP Accessibility Helper WAH = 0.6.6 versions...
CVE-2026-57785: Cross-Site Request Forgery (CSRF)
Unauthenticated Cross Site Request Forgery CSRF in ApusListing = 1.2.63 versions...
CVE-2026-65521: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Unauthenticated Sensitive Data Exposure in WP Social Ninja = 4.3.0 versions...
CVE-2026-65489: Missing Authorization
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...
CVE-2026-57716: Improper Limitation of a Pathname to a Restricted Directory
Unauthenticated Arbitrary File Deletion in Broadcast Live Video = 7.2.4 versions...
CVE-2026-65472: Missing Authorization
Unauthenticated Broken Access Control in Kit formerly ConvertKit = 3.3.5 versions...
CVE-2026-57428: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Sprout Clients = 3.2.3 versions...
CVE-2026-24639: Server-Side Request Forgery (SSRF)
Author Server Side Request Forgery SSRF in Photo Block = 1.7.1 versions...