EUVD-2026-60051

A vulnerability was detected in Alaev SEO Tools Extension up to 1.0.10 on Chrome. This impacts the function addDiv of the file src/popup.html of the component Popup UI. Performing a manipulation results in basic cross site scripting. The attack can be initiated remotely. The exploit is now public...

CVE-2026-19988: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability was detected in Alaev SEO Tools Extension up to 1.0.10 on Chrome. This impacts the function addDiv of the file src/popup.html of the component Popup UI. Performing a manipulation results in basic cross site scripting. The attack can be initiated remotely. The exploit is now public...

PT-2026-76665

Name of the Vulnerable Software and Affected Versions Dell ObjectScale versions prior to 4.3.0.1 Description The svc tools component allows the insertion of sensitive information into log files. A low privileged attacker with local access could exploit this issue to cause information disclosure...

PT-2026-73206

A vulnerability was detected in Alaev SEO Tools Extension up to 1.0.10 on Chrome. This impacts the function addDiv of the file src/popup.html of the component Popup UI. Performing a manipulation results in basic cross site scripting. The attack can be initiated remotely. The exploit is now public...

PT-2026-76709

Name of the Vulnerable Software and Affected Versions JetBrains PyCharm versions prior to 2026.2.1 Description Unauthenticated remote code execution is possible through the use of Jupyter MCP tools. MCP Model Context Protocol is a standard that allows AI models to access data and tools from...

CVE-2026-75060: Missing Authentication for Critical Function

In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mozjs78 (UTSA-2024-002121)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002121 advisory. When copying a network request from the developer tools panel as a curl command the output was not being properly sanitized and could allow arbitrary commands to be...

Hacker

!Typing SVGhttps://readme-typing-svg.herokuapp.com?font=Fira...

ESP32Marauder nightly_2bc5d7b

ESP32 Marauder A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32 Getting Started Download the latest release of the firmware. Check out the project wiki for a full overview of the ESP32 Marauder For Sale Now You can buy the ESP32 Marauder using this link Read more...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: flux, lazygit, spark-operator, bazelisk, kapp-controller, kwok, scorecard, nfpm, k8sgateway, thanos-operator, kubernetes-replicator, gobuster, conftest, go-discover, crossplane-provider-aws-sns, vale, cosign, minio, cert-manager, cloud-provider-vsphere,...

CVE-2026-73845 CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)

CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckangetmqaquality and ckangetmqaqualitydetails tools in src/tools/quality.ts use isValidMqaServer to validate the serverurl parameter with a prefix-only regular expression for dati.gov.it, allowing suffix-host an...

CVE-2026-73845

CKAN MCP Server before v0.4.112 is affected by an allowlist bypass in the isValidMqaServer check within the ckan_get_mqa_quality and ckan_get_mqa_quality_details tools (src/tools/quality.ts). The prefix-only regex for dati.gov.it allows suffix-host and URL-userinfo values to target an attacker-co...

GO-2023-2331 vulnerabilities

Vulnerabilities for packages: kubernetes, prometheus-adapter-fips, prometheus-adapter, rancher-webhook, temporal-server-fips, metrics-server-fips, aws-ebs-csi-driver, volume-modifier-for-k8s, kine, temporal-fips, rancher-webhook-fips, envoy-ratelimit, buildkitd, docker-compose, cri-tools, k3s,...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: goreleaser, grype-db, docker-cli-buildx, zot, k9s-fips, buildah, kargo, spire-server-fips, aws-otel-collector-fips, apko-fips, k9s, opentelemetry-collector-contrib-fips, beats-fips, grype-fips, nerdctl, prometheus-fips, telegraf, osv-scanner, spire-server,...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: terragrunt, lazygit, grafana-alloy, tempo, datadog-agent, prometheus, nfpm, dgraph, opentelemetry-collector, k8sgpt, goreleaser, teleport, vcluster, opentelemetry-collector-contrib, nuclei, weaviate, maru, eksctl, terraform-mcp-server, cri-tools, k3s, malcontent,...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, kubeflow-pipelines, kubernetes-dns-node-cache, spark-operator, ip-masq-agent, nodetaint, aws-efs-csi-driver, cri-tools, k8s-device-plugin, argocd-image-updater, kubernetes-csi-driver-hostpath...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: policy-controller, syft, buf, docker-compose, grype, kaniko, dagger, cri-tools, helm-push, melange, harbor-scanner-trivy, neuvector-scanner, k3d, wolfictl...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: flux, rabbitmq-default-user-credential-updater, spark-operator, kapp-controller, chartmuseum, ko, k8sgateway, thanos-operator, azure-service-operator, kubernetes-dashboard-web, aws-privateca-issuer, kubernetes-csi-external-health-monitor, gobuster, argo-events, fzf,...

GO-2024-2719 vulnerabilities

Vulnerabilities for packages: aactl, ko, tekton-chains, goreleaser, zarf, wolfictl, policy-controller, slsa-verifier, falcoctl, spire-server, vexctl, tkn, gitsign, melange, skaffold, apko, flux-source-controller, zot, kubescape, neuvector-sigstore-interface...

PT-2026-72066

Name of the Vulnerable Software and Affected Versions CKAN MCP Server versions prior to 0.4.112 Description The ckan get mqa quality and ckan get mqa quality details functions in src/tools/quality.ts use the isValidMqaServer function to validate the server url parameter. Because the validation us...