Exploit for SQL Injection in Strapi

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-100625: Unintended Proxy or Intermediary

Capgo capgo.app exposes a native build TUS upload proxy supabase/functions/backend/public/build/upload.ts that authorizes a caller against a single build job identified by the supplied builderjobid and validates only that job's stored uploadpath, but then forwards the user-controlled TUS resource...

PT-2026-99425

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description A Confused Deputy issue in Kibana Agent Builder allows a non-administrative user with permissions to edit a shared agent to trigger privileged operations. These operations are executed using t...

CVE-2026-72668: Unintended Proxy or Intermediary

Unintended Proxy or Intermediary 'Confused Deputy' CWE-441 in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent could cause privileged operations to be carried out under the identity of a higher-privileged user who subsequently interacts...

PT-2026-99351

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.45.0 Description Authenticated builders can read arbitrary local files because the OpenAPI/Swagger import validator fails to disable external JSON reference resolution. By embedding file:// references within OpenAP...

PT-2026-99356

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.45.0 Description An issue exists where the system fails to properly scope the 'GET /api/chat-links' endpoint by workspace. This allows users with builder access to a single workspace to enumerate chat identity link...

CVE-2026-100687: Exposure of Sensitive Information to an Unauthorized Actor

Budibase Server before 3.45.0 fails to redact plaintext datasource credentials before broadcasting external table updates to the Builder collaboration websocket room. Attackers with Builder access can intercept unredacted datasource objects containing database passwords and API keys by observing...

PT-2026-99358

Name of the Vulnerable Software and Affected Versions Budibase Server versions prior to 3.45.0 Description The software fails to redact plaintext datasource credentials when broadcasting external table updates to the Builder collaboration websocket room. Users with Builder access can intercept...

PT-2026-99353

Name of the Vulnerable Software and Affected Versions Budibase Server versions prior to 3.45.0 Description An arbitrary file write issue exists in the PWA icon upload endpoint. The system extracts user-supplied ZIP archives without proper symlink validation. Users with the BUILDER role can create...

Exploit for CVE-2026-62062

abraxaslabs.tech · github.com/abraxas ·&...

RLSA-2026:71543 Important: cockpit-image-builder security update

The image-builder-frontend generates custom images suitable for deploying systems or uploading to the cloud. It integrates into Cockpit as a frontend for osbuild. Security Fixes: fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding CVE-2026-75899 fast-uri:...

cockpit-image-builder security update

An update is available for cockpit-image-builder. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The image-builder-frontend generates custom images suitable fo...

WordPress Themify Builder plugin <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by thevietronin in WordPress Plugin Themify Builder versions = 7.8.1...

WordPress JetFormBuilder — Dynamic Blocks Form Builder plugin <= 3.6.5.3 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Tarcísio Luchesi De Almeida Silva Poystick in WordPress Plugin JetFormBuilder versions = 3.6.5.3...

Kibana 9.4.7, 9.5.0 Security Update (ESA-2026-85)

Unintended Proxy or Intermediary 'Confused Deputy' in Kibana Leading to Privilege Escalation Unintended Proxy or Intermediary 'Confused Deputy' CWE-441 in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent could cause privileged operations...

CVE-2026-95866

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Field in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-95864

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cssfonts' Parameter in all versions up to, and including, 7.8.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

CVE-2026-93656

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Field in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-88996

The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'pagetitle' POST Parameter via pagetitle Smart Tag in all versions up to, and including, 2.0.2 due to insufficient input...

WordPress WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin <= 2.0.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by UKO in WordPress Plugin Contact Form by WPForms versions = 2.0.2...