web-security-labs

🌐 Sasidhar C — Web Security Labs Hands-on web security labs a...

AlmaLinux 9.6 [TuxCare] Security Update: tar (ALMALINUX9.6:CLSA-2026:1789131413)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789131413 advisory. - A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designate...

Rocky Linux 8 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc (crlsa-2022_2143)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20222143 advisory. psgo: Privilege escalation in 'podman top' CVE-2022-1227 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

GHSA-GR2M-V5GQ-V685 Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions

Impact Windows opened from a sandboxed top-level document did not inherit that document's HTML sandbox restrictions, so content that was meant to run sandboxed could open a window with the app's full origin. GHSA-hq2x-r82h-9wj4 covers the same issue for sandboxed iframes. Apps are only affected i...

Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions

Impact Windows opened from a sandboxed top-level document did not inherit that document's HTML sandbox restrictions, so content that was meant to run sandboxed could open a window with the app's full origin. GHSA-hq2x-r82h-9wj4 covers the same issue for sandboxed iframes. Apps are only affected i...

OWASP LLM Top 10 2026: Every Move Points the Same Direction

This is Post 4 of a four-part series: Post 1: Agentic AI Security: The Chatbot Era Is Over Post 2: Generative AI Security: Why AI Needs a New Kind of Security Post 3: The OWASP LLM Top 10 Was the Warm-Up: What Comes Next The 2026 edition of the the OWASP Top 10 for LLM Applications, published by...

OESA-2026-3911 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A flaw was found in G...

OESA-2026-3912 tar security update

GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored. Security Fixes: A flaw was found in G...

CVE-2026-54608 MythicalDash: Unauthenticated payment bypass in Stripe success-redirect endpoint allows arbitrary free credit top-up

MythicalDash is a Pterodactyl client area. In 3.5.4-aurora and earlier, GET /api/stripe/process in backend/app/Api/System/Gateways/Stripe.php creates a pending row in mythicaldashstripepayments before Stripe checkout succeeds and embeds the payment code in the success redirect, while GET...

CVE-2026-54608 MythicalDash: Unauthenticated payment bypass in Stripe success-redirect endpoint allows arbitrary free credit top-up

MythicalDash is a Pterodactyl client area. In 3.5.4-aurora and earlier, GET /api/stripe/process in backend/app/Api/System/Gateways/Stripe.php creates a pending row in mythicaldashstripepayments before Stripe checkout succeeds and embeds the payment code in the success redirect, while GET...

CVE-2026-90298

CVE-2026-90298 affects the Linux kernel Allwinner DRM (drm/sun4i) TCON driver . The root cause is a device reference leak : the function of_find_device_by_node() acquires a device reference, which was not dropped after mux configuration succeeds. The fix, provided in the referenced kernel commits...

PT-2026-94646

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/sun4i component where the of find device by node function takes a device reference that is not properly released. This occurs during TCON TOP device handling,...

PT-2026-94909

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.1.0 Description An issue exists in the camcc-sc8280xp clock driver where a warning is triggered when unused clocks are shut down. This occurs due to the introduction of sync state support in the clock and power domain...

CVE-2026-18113

Concrete CMS 9.0 through 9.5.2 is affected by a stored cross-site scripting (XSS) vulnerability in the Top Navigation Bar block . The block failed to HTML-escape dropdown child page names before rendering them into the page, allowing a user with page-creation or renaming privileges to inject a sc...

EUVD-2026-78904

In Concrete CMS 9.0 to 9.5.2, the Top Navigation Bar block did not HTML-escape dropdown child page names before writing them into the page, so a user who could create or rename pages could store a script through a child page name and have it run in the browser of any visitor, editor, or...

CVE-2026-18113 Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS in the Top Navigation Bar Block via Dropdown Child Page Names

In Concrete CMS 9.0 to 9.5.2, the Top Navigation Bar block did not HTML-escape dropdown child page names before writing them into the page, so a user who could create or rename pages could store a script through a child page name and have it run in the browser of any visitor, editor, or...

MAL-2026-16196 Malicious code in chai-as-crack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 090c71f12df6d5441dce686e54fef42805f1afd6575d48bc0f6263dcf50b2f21 Package's main entry index.js unconditionally requires./lib/config at top level, causing the file to execute on any require'chai-as-crack'...

owasp-top10-ci-pipeline

Flagship 1: Application Security Pipeline A small notes app w...

PT-2026-92165

Name of the Vulnerable Software and Affected Versions Concrete CMS versions 9.0 through 9.5.2 Description The Top Navigation Bar block fails to HTML-escape dropdown child page names before rendering them on the page. This allows a user with permissions to create or rename pages to inject a...

CVE-2026-18113: Improper Neutralization of Input During Web Page Generation

In Concrete CMS 9.0 to 9.5.2, the Top Navigation Bar block did not HTML-escape dropdown child page names before writing them into the page, so a user who could create or rename pages could store a script through a child page name and have it run in the browser of any visitor, editor, or...