18915 matches found
CVE-2026-5116 Contact Form 7 – Dynamic Text Extension <= 5.0.5 - Authenticated (Editor+) Stored Cross-Site Scripting
The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.0.5. This is due to insufficient output escaping on form shortcode keys displayed in the admin "Scan Forms for Post Meta and User Data Keys" page...
CVE-2026-5116
The vulnerability CVE-2026-5116 affects the WordPress plugin Contact Form 7 – Dynamic Text Extension (versions
Linux Distros Unpatched Vulnerability : CVE-2026-53504
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the convolution filter regular expression performs exponential backtracking on...
Debian dla-4719 : p7zip - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4719 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4719-1 [email protected]...
CVE-2026-65986
CVAT is an open source interactive video and image annotation tool for computer vision. Versions 2.5.0 through 2.66.0 contain a XSS vulnerability that can be accessed through annotation guide assets. When CVAT serves the files attached to an annotation guide, it labels them with a media type...
UBUNTU-CVE-2026-47781
PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a .pdm-plugins directory during initialization, allowing an attacker-controlled file in an untrusted repository checkout to execute arbitrary Python code befo...
Iran Cyberattacks Against Minnesota Water Systems
Attribution is preliminary, and so far it seems no real damage. And it seems like this is a campaign that has targeted at least seven states. And, because this is where the US is right now, Trump doesn't believe it's Iran and thinks Minnesota…I guess…hacked itself. "I think I blame it on Minnesot...
WordPress DTX – Dynamic Text Extension for Contact Form 7 plugin <= 5.0.5 - Authenticated (Editor+) Stored Cross-Site Scripting vulnerability
Authenticated Editor+ Stored Cross-Site Scripting vulnerability discovered by SATYARTH PRAKASH XoxoL33t in WordPress Plugin Contact Form 7 – Dynamic Text Extension versions = 5.0.5...
CLSA-2026-1785468077 TuxCare security update for protobufjs (7 CVEs)
TuxCare rebuilt protobufjs to address 7 CVEs. Fixed in 5.0.0-tuxcare.2...
CLSA-2026-1785468076 TuxCare security update for lodash-es (7 CVEs)
TuxCare rebuilt lodash-es to address 7 CVEs. Fixed in 4.17.11-tuxcare.1...
CLSA-2026-1785814923 TuxCare security update for org.springframework.security (2 CVEs)
TuxCare rebuilt 19 org.springframework.security packages to address 2 CVEs. Fixed in 6.2.7-tuxcare.1...
CLSA-2026-1785727938 TuxCare security update for io.netty (13 CVEs)
TuxCare rebuilt 47 io.netty packages to address 13 CVEs. Fixed in 4.1.115.Final-tuxcare.7...
CLSA-2026-1785380886 TuxCare security update for ws (1 CVE)
TuxCare rebuilt ws to address 1 CVE. Fixed in 7.5.9-tuxcare.2...
CLSA-2026-1785380760 TuxCare security update for axios (5 CVEs)
TuxCare rebuilt axios to address 5 CVEs. Fixed in 1.7.9-tuxcare.3...
CLSA-2026-1785380879 TuxCare security update for 84 packages (1 CVE)
TuxCare rebuilt 84 packages to address 1 CVE. Fixed in 7.0.7-tuxcare.1...
CLSA-2026-1784856319 TuxCare security update for 7 packages (2 CVEs)
TuxCare rebuilt 7 packages to address 2 CVEs. Fixed in 26.0.0-tuxcare.1...
CLSA-2026-1784856210 TuxCare security update for 12 packages (3 CVEs)
TuxCare rebuilt 12 packages to address 3 CVEs. Fixed in 7.5.1-tuxcare.5...
CLSA-2026-1784683083 TuxCare security update for 4 packages (7 CVEs)
TuxCare rebuilt 4 packages to address 7 CVEs. Fixed in 2.9.18-tuxcare.2...