GHSA-2883-XCG3-V3HH vulnerabilities

Vulnerabilities for packages: pulumi, code-server, opensearch-dashboards, prism, ts-patch, sqlpad, vitess, lerna...

CVE-2026-87504

creationtimestamp| type| source ---|---|--- 2026-09-10 02:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv5257c67k2j 2026-09-10 04:48:55+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 13:37:07+00:00| seen|...

CVE-2026-87526

creationtimestamp| type| source ---|---|--- 2026-09-10 02:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv525amhxw24 2026-09-10 04:49:48+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 12:07:07+00:00| seen|...

Craft-CMS-3.0.25---Cross-Site-Scripting

Craft-CMS-3.0.25 - Cross-Site Scripting Craft CMS 3.0.25 - Vulnerabilidad de Cross-Site Scripting CVE-CVE-2018-20418 https://vulners.com/cve/CVE-2018-20418 Prueba de concepto Permite ejecutar un Cross-Site Scripting al guardar un nuevo título desde la pestaña de la consola. root@kitploit: POST...

CVE-2026-87500

creationtimestamp| type| source ---|---|--- 2026-09-10 02:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4zle25ko2f 2026-09-10 04:48:46+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 14:37:07+00:00| seen|...

CVE-2026-87492

creationtimestamp| type| source ---|---|--- 2026-09-10 02:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4zlcoahh2j 2026-09-10 04:48:28+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 15:37:06+00:00| seen|...

CVE-2026-87448

creationtimestamp| type| source ---|---|--- 2026-09-10 02:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4yzhpg2q2w 2026-09-10 04:46:53+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 17:37:07+00:00| seen|...

CVE-2026-87634

creationtimestamp| type| source ---|---|--- 2026-09-10 02:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4yzg4t4t2f 2026-09-10 04:45:14+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 07:07:07+00:00| seen|...

CVE-2026-87609

creationtimestamp| type| source ---|---|--- 2026-09-10 02:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4yhlhus52b 2026-09-10 05:15:22+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 08:37:07+00:00| seen|...

CVE-2026-87455

creationtimestamp| type| source ---|---|--- 2026-09-10 02:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4yhk3suj2t 2026-09-10 04:47:08+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 18:07:07+00:00| seen|...

CVE-2026-18351

The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementorfileupload function. This is due to insufficient file type validation in the isfiletypevalid function, which uses the...

EUVD-2026-75229

BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed may be caused...

CVE-2026-84063

BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed may be caused...

CVE-2026-84063

BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed may be caused...

CVE-2026-84063

BurgerEditor versions 3.2.0 through 3.4.0 are affected by an unrestricted file upload flaw allowing a dangerous file type to be uploaded by any authenticated user. Successful exploitation may lead to arbitrary PHP code execution on the server. The CNA-assigned CVSS 4.0 score is 8.5 (HIGH) , with ...

CVE-2026-87638

creationtimestamp| type| source ---|---|--- 2026-09-10 02:10:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4xvpfgze25 2026-09-10 04:45:23+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910...

CVE-2026-87528

creationtimestamp| type| source ---|---|--- 2026-09-10 02:10:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4xvnvbej2t 2026-09-10 04:49:53+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260910 2026-09-10 10:37:07+00:00| seen|...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...