CVE-2025-27896: Improper Neutralization of Input During Web Page Generation

IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within ...

CVE-2025-27895: Improper Neutralization of Input During Web Page Generation

IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within ...

CVE-2026-109346: User Interface (UI) Misrepresentation of Critical Information

better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting clientid and scope. Attackers can start a device request via /device/code, trick signed-in users into approving the code, then...

termshark

Termshark Una interfaz de usuario de terminal para tshark, inspirada en Wireshark. ¡V2.4 ya está disponible con búsqueda de paquetes y perfiles de colores y columnas! Consulta elChangeLog. Si estás depurando en una máquina remota con un pcap grande y sin ganas de hacer scp de vuelta a tu...

dp_crypto

dpcrypto Exploit de oráculo de cifrado basado en Base64 para CVE-2017-9248 Manejador de diálogo de Telerik UI for ASP.NET AJAX Publicado en exploit-db Actualización 2020 - Tenga en cuenta que la versión en exploit-db ahora está muy desactualizada en comparación con la última versión aquí en GitHu...

python313-XStatic-jquery-ui-1.13.0.1-2.4 on GA media (moderate)

python313-XStatic-jquery-ui-1.13.0.1-2.4 on GA media Announcement ID: openSUSE-SU-2026:11997-1 Rating: moderate Cross-References: CVE-2016-7103 CVSS scores: CVE-2016-7103 SUSE : 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

inspector

MCP Inspector A developer tool for inspecting Model Context Protocol MCP servers. It ships as a single package, @modelcontextprotocol/inspector, that provides four ways to inspect a server: Web — a Vite + React + Mantine single-page app with a Node backend. CLI — a scriptable command-line client...

CVE-2026-106139

In Progress® Kendo UI for Vue @progress/kendo-vue-charts starting with version 2.5.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as raw HTML without encoding, in both the single-point and the shared tooltip. An attacker with low privileges who can influence a...

EUVD-2026-96305

In Progress® Kendo UI for Vue @progress/kendo-vue-charts starting with version 2.5.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as raw HTML without encoding, in both the single-point and the shared tooltip. An attacker with low privileges who can influence a...

CVE-2026-106139

In Progress® Kendo UI for Vue (@progress/kendo-vue-charts) versions 2.5.0 through 16.2.0 are vulnerable to Cross-Site Scripting (XSS) via the default Chart tooltip. The root cause is that the single-point and shared tooltips render formatted point values as raw HTML without proper encoding. An at...

CVE-2026-106444 vulnerabilities

Vulnerabilities for packages: ts-patch, pelias-api, langfuse-fips, tileserver-gl-fips, tileserver-gl, wazuh-dashboard, wazuh-dashboard-fips, lerna, langfuse, librechat, opensearch-dashboards, opensearch-dashboards-fips, prism, kibana, renovate, verdaccio, nextcloud-server, rancher-api-ui...

CVE-2026-106445 vulnerabilities

Vulnerabilities for packages: ts-patch, pelias-api, langfuse-fips, tileserver-gl-fips, tileserver-gl, wazuh-dashboard, wazuh-dashboard-fips, lerna, langfuse, librechat, opensearch-dashboards, opensearch-dashboards-fips, prism, kibana, renovate, verdaccio, nextcloud-server, rancher-api-ui...

CVE-2026-106446 vulnerabilities

Vulnerabilities for packages: ts-patch, pelias-api, langfuse-fips, tileserver-gl-fips, tileserver-gl, wazuh-dashboard, wazuh-dashboard-fips, lerna, langfuse, librechat, opensearch-dashboards, opensearch-dashboards-fips, prism, kibana, renovate, verdaccio, nextcloud-server, rancher-api-ui...

GHSA-P8WG-VRV2-V86F vulnerabilities

Vulnerabilities for packages: ts-patch, pelias-api, langfuse-fips, tileserver-gl-fips, tileserver-gl, wazuh-dashboard, wazuh-dashboard-fips, lerna, langfuse, librechat, opensearch-dashboards, opensearch-dashboards-fips, prism, kibana, renovate, verdaccio, nextcloud-server, rancher-api-ui...

GHSA-8R5X-FM3F-WHWJ vulnerabilities

Vulnerabilities for packages: ts-patch, pelias-api, langfuse-fips, tileserver-gl-fips, tileserver-gl, wazuh-dashboard, wazuh-dashboard-fips, lerna, langfuse, librechat, opensearch-dashboards, opensearch-dashboards-fips, prism, kibana, renovate, verdaccio, nextcloud-server, rancher-api-ui...

GHSA-XW65-4HP5-5HC7 vulnerabilities

Vulnerabilities for packages: ts-patch, pelias-api, langfuse-fips, tileserver-gl-fips, tileserver-gl, wazuh-dashboard, wazuh-dashboard-fips, lerna, langfuse, librechat, opensearch-dashboards, opensearch-dashboards-fips, prism, kibana, renovate, verdaccio, nextcloud-server, rancher-api-ui...

GHSA-P8WG-VRV2-V86F vulnerabilities

Vulnerabilities for packages: lerna, rancher-api-ui, tileserver-gl, nextcloud-server, ts-patch, renovate, prism, opensearch-dashboards...

GHSA-8R5X-FM3F-WHWJ vulnerabilities

Vulnerabilities for packages: lerna, rancher-api-ui, tileserver-gl, nextcloud-server, ts-patch, renovate, prism, opensearch-dashboards...

CVE-2026-106445 vulnerabilities

Vulnerabilities for packages: lerna, rancher-api-ui, tileserver-gl, nextcloud-server, ts-patch, renovate, prism, opensearch-dashboards...

CVE-2026-106444 vulnerabilities

Vulnerabilities for packages: lerna, rancher-api-ui, tileserver-gl, nextcloud-server, ts-patch, renovate, prism, opensearch-dashboards...