CLSA-2026-1792375684 TuxCare security update for @angular/platform-browser (1 CVE)

TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 16.2.12-tuxcare.6...

CLSA-2026-1792375683 TuxCare security update for @angular/platform-browser (1 CVE)

TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 15.2.10-tuxcare.4...

CLSA-2026-1792375681 TuxCare security update for @angular/platform-browser (1 CVE)

TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 9.1.13-tuxcare.4...

CLSA-2026-1792375677 TuxCare security update for @angular/platform-browser (1 CVE)

TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 18.2.14-tuxcare.1...

CLSA-2026-1792375673 TuxCare security update for @angular/platform-browser (1 CVE)

TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 14.3.0-tuxcare.1...

RHEL 9 : webkit2gtk3 (RHSA-2026:84583)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84583 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: angle: ANGLE in...

RHEL 8 : webkit2gtk3 (RHSA-2026:84584)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84584 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: angle: ANGLE in...

ALSA-2026:84584 Critical: webkit2gtk3 security, bug fix, and enhancement update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read CVE-2026-87596 chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafte...

ALSA-2026:84583 Critical: webkit2gtk3 security, bug fix, and enhancement update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read CVE-2026-87596 chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafte...

CVE-2026-109434: User Interface (UI) Misrepresentation of Critical Information

Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attacker...

CVE-2026-4418: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

AlmaLinux 8 : webkit2gtk3 (ALSA-2026:84584)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:84584 advisory. chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via out-of-bounds read CVE-2026-87596 chromium-browser: angle: ANGLE in Google...

CVE-2026-110981

The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before reflecting it into a JavaScript event handler on its gallery breadcrumb links, allowing unauthenticated attackers to inject arbitrary script that executes in the browser of anyon...

CVE-2026-110981 WP Photo Album Plus < 9.2.11.002 - Reflected XSS via 'wppa-cat' Parameter

The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before reflecting it into a JavaScript event handler on its gallery breadcrumb links, allowing unauthenticated attackers to inject arbitrary script that executes in the browser of anyon...

CVE-2026-110981

The WP Photo Album Plus WordPress plugin, in versions prior to 9.2.11.002 , contains a Reflected Cross-Site Scripting (XSS) vulnerability. The issue arises because the plugin fails to properly escape a category navigation value (specifically the 'wppa-cat' parameter) before reflecting it into a J...

EUVD-2026-103399

The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before reflecting it into a JavaScript event handler on its gallery breadcrumb links, allowing unauthenticated attackers to inject arbitrary script that executes in the browser of anyon...

CVE-2026-110981 WP Photo Album Plus < 9.2.11.002 - Reflected XSS via 'wppa-cat' Parameter

The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before reflecting it into a JavaScript event handler on its gallery breadcrumb links, allowing unauthenticated attackers to inject arbitrary script that executes in the browser of anyon...

Malicious code in leakdeep (PyPI)

Source: amazon-inspector c0818f9da5e7dc1413ff1b2a24d3cb53d0b49d06bd802502296d6d8e8e536fee The package presents itself as an OSINT / credential-leak intelligence framework with a search CLI, but the advertised SearchEngine.search is a stub returning an empty list. Every invocation of the CLI...

Malicious code in leakdeep (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0818f9da5e7dc1413ff1b2a24d3cb53d0b49d06bd802502296d6d8e8e536fee The package presents itself as an OSINT / credential-leak intelligence framework with a search CLI, but the advertised SearchEngine.search is a stub...

PT-2026-116554

The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before reflecting it into a JavaScript event handler on its gallery breadcrumb links, allowing unauthenticated attackers to inject arbitrary script that executes in the browser of anyon...