1451 matches found
GHSA-642R-3GJ9-2PJ5 vulnerabilities
Vulnerabilities for packages: flyway, logstash, apache-nifi, druid, apache-tika, keycloak, sonarqube, wildfly, apicurio-registry, cass-config-builder, akhq, scala, trino, tez, infinispan, apache-nifi-registry, spdx-tools-java, opensearch, dependency-track, strimzi-kafka-operator, gradle,...
CVE-2026-68494 vulnerabilities
Vulnerabilities for packages: flyway, logstash, apache-nifi, druid, apache-tika, keycloak, sonarqube, wildfly, apicurio-registry, cass-config-builder, akhq, scala, trino, tez, infinispan, apache-nifi-registry, spdx-tools-java, opensearch, dependency-track, strimzi-kafka-operator, gradle,...
PT-2026-104074
The Visitors Traffic Real Time Statistics Pro plugin for WordPress is vulnerable to unauthenticated stored Cross-Site Scripting in all versions up to, and including, 11.22 via the page title parameter of the ahcpro track visitor AJAX action. The action is registered for logged-out callers wp ajax...
cve-2026-25676
CVE-2026-25676 Research DLL Search Path Hijacking в установщике M-Track Duo HD Обзор Этот репозиторий содержит начальное исследование и proof-of-concept, связанные с CVE-2026-25676 — уязвимостью перехвата пути поиска DLL, затрагивающей установщик M-Track Duo HD 1.0.0. Цель этого проекта —...
dependency-track v4.14.4
OWASP Dependency-Track Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials SBO...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerabilities have been resolved: s390/dasd: fixed an issue where error recovery led to data corruption on ESE devices. Extent Space Efficient ESE or thin-provisioned volumes need to be formatted on demand during normal IO processing. The dasdeseneedsformat...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: x86/mm/pat: fixed the handling of VMPAT in COW mappings. The handling of VMPAT does not work correctly in COW mappings: the first PTE or, in fact, all PTEs can be replaced during write faults, causing them to point to anonymou...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: macsec: Fixed the UAF bug related to realdev. A new macsec device was created, but there was no reference to realdev. This does not ensure that realdev is freed after the macsec device is removed. This will trigger the UAF bug...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053218)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053218 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Handle SRCU initialization failure during page track init Check the return of...
sbom-sentinel
sbom-sentinel !CIhttps://github.com/MUGHEESM/sbom-sentine...
CVE-2026-82811
A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function of the component postMessage Handler. The manipulation leads to origin validation error. It is possible to initiate the attack remotely. The exploit has been disclosed publicly a...
CVE-2026-82811 Toggl OÜ Toggl Track Extension postMessage origin validation
A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function of the component postMessage Handler. The manipulation leads to origin validation error. It is possible to initiate the attack remotely. The exploit has been disclosed publicly a...
CVE-2026-82811
CVE-2026-82811 affects the Toggl Track Chrome extension (version 4.11.16 ). The vulnerability resides in the extension's postMessage Handler , which fails to properly validate message origins, allowing an attacker to accept forged session-state messages through an unauthenticated handler. The att...
EUVD-2026-68679
A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function of the component postMessage Handler. The manipulation leads to origin validation error. It is possible to initiate the attack remotely. The exploit has been disclosed publicly a...
CVE-2026-82811 Toggl OÜ Toggl Track Extension postMessage origin validation
A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function of the component postMessage Handler. The manipulation leads to origin validation error. It is possible to initiate the attack remotely. The exploit has been disclosed publicly a...
PT-2026-83935
A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function of the component postMessage Handler. The manipulation leads to origin validation error. It is possible to initiate the attack remotely. The exploit has been disclosed publicly a...
CVE-2026-82811: Origin Validation Error
A security vulnerability has been detected in Toggl OÜ Toggl Track Extension 4.11.16. This affects an unknown function of the component postMessage Handler. The manipulation leads to origin validation error. It is possible to initiate the attack remotely. The exploit has been disclosed publicly a...
WordPress WPCargo Track & Trace plugin < 8.0.4 - Unauthenticated SQL Injection via wpcargo_tracking_number vulnerability
Unauthenticated SQL Injection via wpcargotrackingnumber vulnerability discovered by Shivamani Vastrala in WordPress Plugin WPCargo Track & Trace versions 8.0.4...