wagtail-all-in-one-accessibility (>=2.0.0, <=2.1.0) potentially affected by CVE-2026-25517 via wagtail (7.1.0)

wagtail PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-all-in-one-accessibility =2.0.0, =2.1.0 Source cves: CVE-2026-25517 Source advisory: SNYK:PYTHON-WAGTAIL-15189141...

wagtail-all-in-one-accessibility (>=2.0.0, <=2.1.0) potentially affected by CVE-2026-25517 via wagtail (7.1.0)

wagtail PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-all-in-one-accessibility =2.0.0, =2.1.0 Source cves: CVE-2026-25517 Source advisory: OSV:GHSA-4QVV-G3VR-M348...

wagtail-all-in-one-accessibility (>=2.0.0, <=2.1.0) potentially affected by CVE-2026-25517 via wagtail (7.1.0)

wagtail PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-all-in-one-accessibility =2.0.0, =2.1.0 Source cves: CVE-2026-25517 Source advisory: GHSA-4QVV-G3VR-M348...

Deepfake ‘Nudify’ Technology Is Getting Darker—and More Dangerous

Sexual deepfakes continue to get more sophisticated, capable, easy to access, and perilous for millions of women who are abused with the technology...

CVE-2026-24629

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Stored XSS.This issue affects Web Accessibility with Max Access: from n/a through = 2.1.0...

CTF for Education

In this paper, we take a close look at how CTF can be used in cybersecurity education. We divide the CTF competitions into four different categories, which are attack-based CTFs, defense-based CTFs, jeopardy CTFs and gamified and wargames CTFs. We start our analysis by summarizing the main...

CVE-2026-24629

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Stored XSS.This issue affects Web Accessibility with Max Access: from n/a through = 2.1.0...

CVE-2026-24629

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Stored XSS.This issue affects Web Accessibility with Max Access: from n/a through = 2.1.0...

CVE-2026-24629

CVE-2026-24629 concerns a stored cross-site scripting (XSS) vulnerability in the WordPress plugin Web Accessibility with Max Access (accessibility-toolbar) by Ability, Inc. The issue arises from improper input neutralization during web page generation and affects the product family as deployed in...

CVE-2026-24629 WordPress Web Accessibility with Max Access plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Stored XSS.This issue affects Web Accessibility with Max Access: from n/a through = 2.1.0...

CVE-2026-24629 WordPress Web Accessibility with Max Access plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Stored XSS.This issue affects Web Accessibility with Max Access: from n/a through = 2.1.0...

WordPress plugin Web Accessibility with Max Access has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

CVE-2026-24629: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Stored XSS.This issue affects Web Accessibility with Max Access: from n/a through = 2.1.0...

PT-2026-4459

Name of the Vulnerable Software and Affected Versions Ability, Inc Web Accessibility with Max Access versions through 2.1.0 Description The software contains a flaw due to improper neutralization of input during web page generation, specifically a Stored Cross-site Scripting issue. This allows fo...

Incoming Goods Suite Access Control Compromise

The vulnerability of the Incoming Goods Suite registration and delivery method is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to compromise the integrity and accessibility of the protected information...

WordPress Web Accessibility with Max Access plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Akshat Parikh in WordPress Plugin Web Accessibility with Max Access versions = 2.1.0...

CVE-2022-23142

ZXEN CG200 has a DoS vulnerability. An attacker could construct and send a large number of HTTP GET requests in a short time, which can make the product management websites not accessible...

CVE-2022-0150

The WP Accessibility Helper WAH WordPress plugin before 0.6.0.7 does not sanitise and escape the wahi parameter before outputting back its base64 decode value in the page, leading to a Reflected Cross-Site Scripting issue...

CVE-2025-23725

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pshikli Accessibility Task Manager accessibility-task-manager allows Reflected XSS.This issue affects Accessibility Task Manager: from n/a through = 1.2.1...

dify.ai parseInt() Data Compromise

The vulnerability of the parseInt function on the dify.ai development platform is related to the insufficient isolation of system-dependent functions. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informatio...