PT-2026-91451

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 9.0 IBM WebSphere Application Server version 8.5 Description Blind server-side request forgery occurs when processing SOAP requests. Server-side request forgery is a flaw that allows an attacker to indu...

CVE-2026-15887: Server-Side Request Forgery (SSRF)

IBM WebSphere Application Server 9.0, and 8.5 is affected by blind server-side request forgery when processing SOAP requests...

PT-2026-91534

Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description A logic issue involving state management allows a malicious application to bypass Gatekeeper checks. Gatekeeper is a...

CVE-2026-15412: URL Redirection to Untrusted Site

IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could...

CVE-2026-16186: Improper Neutralization of Input During Web Page Generation

IBM WebSphere Application Server 9.0, and 8.5 is affected by a reflected cross-site scripting vulnerability...

PT-2026-91449

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability t...

eJPT-Prep-Guide

eJPT-Prep-Guide eJPT Junior Penetration Tester preparation a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glibc (UTSA-2023-002881)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002881 advisory. A flaw was found in glibc. In an uncommon situation, the gaihinet function may use memory that has been freed, resulting in an application crash. This issue is only...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qt5-qtbase (UTSA-2023-002403)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002403 advisory. In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glibc (UTSA-2023-003034)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003034 advisory. A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash. Tenable h...

CVE-2026-77753

The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the temporary access expires or is disabled, allowing the recipient of a temporary login to retain working access to the site ov...

EUVD-2026-76810

The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the temporary access expires or is disabled, allowing the recipient of a temporary login to retain working access to the site ov...

CVE-2026-77753 Temporary Login Without Password < 1.9.9 - Authenticated Temporary Access Revocation Bypass via Application Passwords

The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the temporary access expires or is disabled, allowing the recipient of a temporary login to retain working access to the site ov...

CVE-2026-77753 Temporary Login Without Password < 1.9.9 - Authenticated Temporary Access Revocation Bypass via Application Passwords

The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the temporary access expires or is disabled, allowing the recipient of a temporary login to retain working access to the site ov...

CVE-2026-77753

The Temporary Login Without Password WordPress plugin versions prior to 1.9.9 contains an authenticated temporary access revocation bypass. The plugin fails to prevent temporary users from creating Application Passwords and does not revoke these credentials once the temporary access expires or is...

Harden-Windows-Security HardenSystemSecurity-v1.0.88.0

Harden Windows Security | A New Threat to Malware Harden Windows Safely, Securely, Only With Official Microsoft Methods How To Use Related Trust Support Security Recommendations Resources License Wiki Basic FAQs Roadmap Donation !IMPORTANT Here are Quick Access Points to Important Sections of thi...

fyp

SecureXPro A desktop-based vulnerability assessment tool that...

CVE-2026-77753: Improper Access Control

The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the temporary access expires or is disabled, allowing the recipient of a temporary login to retain working access to the site ov...

PT-2026-90562

The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the temporary access expires or is disabled, allowing the recipient of a temporary login to retain working access to the site ov...

CVE-2026-78546 Out-of-Bounds Read

Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...