CVE-2026-8306 Stored XSS in Armiya Technologies' Access Control System

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows Stored XSS. This issue affects Access Control System GKS: before Version 2...

CVE-2026-8306 Stored XSS in Armiya Technologies' Access Control System

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows Stored XSS. This issue affects Access Control System GKS: before Version 2...

EUVD-2026-42016

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows XSS Targeting HTML Attributes. This issue affects Access Control System GKS: before Version 2...

CVE-2026-7380 HTML Injection in Armiya Technologies' Access Control System

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows XSS Targeting HTML Attributes. This issue affects Access Control System GKS: before Version 2...

CVE-2026-7380

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows XSS Targeting HTML Attributes. This issue affects Access Control System GKS: before Version 2...

CVE-2026-7380

The CVE-2026-7380 entry concerns Armiya Information Technologies Ltd. Co. Access Control System (GKS). It describes an improper neutralization of Script-Related HTML tags in a web page, enabling basic HTML attribute-based XSS. Affected: GKS Access Control System before version 2. The vulnerabilit...

CVE-2026-34158

creationtimestamp| type| source ---|---|--- 2026-07-07 06:01:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpzwivnajh2p 2026-07-07 07:31:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq23laf7j42a...

CVE-2026-53645

creationtimestamp| type| source ---|---|--- 2026-07-07 00:54:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzfeaqomd27 2026-07-07 02:04:20+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpzjbl2rdb22...

EUVD-2026-41978

ajenti through v2.2.13 has a clickjacking weakness in the browser-facing login and administrative UI. In ajenti-core/aj/http.py, the core HTTP response path initializes an empty header list, forwards handler-added headers verbatim, and finalizes responses through WSGI startresponse without adding...

PT-2026-56165

Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows Collect Data from Common Resource Locations. This issue affects Access Control System GKS: before Version 2...

librpmbuild10-4.20.1-8.1 on GA media (moderate)

librpmbuild10-4.20.1-8.1 on GA media Announcement ID: openSUSE-SU-2026:11193-1 Rating: moderate Cross-References: CVE-2026-44604 CVE-2026-44605 CVSS scores: CVE-2026-44604 SUSE : 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2026-44604 SUSE : 7.3...

Oracle Linux 9 : perl-HTTP-Daemon (ELSA-2026-36187)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-36187 advisory. - Fix CVE-2026-8450: sendfile shell-magic injection via 2-arg open Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Cisco IOS XE Software TWAMP DoS (cisco-sa-twamp-kV4FHugn)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Two-Way Active Measurement Protocol TWAMP server feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected...

perl-HTTP-Daemon security update

6.12-6.1 - Fix CVE-2026-8450: sendfile shell-magic injection via 2-arg open - Resolves: RHEL-184829...

Data Import for Veeam Data Cloud for Salesforce

Purpose This article explains the Data Import feature in Veeam Data Cloud for Salesforce VDCSF: what it does, which sources it currently supports, and how to prepare data for importation. This article is a feature summary only. Full procedural documentation can be found in the VDCSF User Guide...

From Regression to Prior-Aware Inference: Solving the ILWE Family in Randomness Leakage Attacks against ML-DSA

ML-DSA is a representative lattice-based signature scheme standardized by NIST. It relies on signing randomness and rejection sampling to ensure that released signatures are statistically independent of the secret key. Practical implementations, however, may leak partial information about this...

PT-2026-56163

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows Stored XSS. This issue affects Access Control System GKS: before Version 2...

PT-2026-56284

An issue in Oneblog V2.3.9 allows a remote attacker to obtain sensitive information via the RestApiController.java, JsApiTicketComponent.java, and the GetAccessTokenComponent.java component...

PT-2026-56162

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows XSS Targeting HTML Attributes. This issue affects Access Control System GKS: before Version 2...

PT-2026-56164

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows Reflected XSS. This issue affects Access Control System GKS: before Version 2...