CVE-2026-47890

Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events SSE with view fragments. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...

CVE-2026-47890

Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events SSE with view fragments. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...

EUVD-2026-66864

Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager 5.0.1 - A non-manager can therefore read attendee names, usernames, registration dates and statuses for events they do not manage, including lists belonging to unpublished events...

CVE-2026-77990 Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager 5.0.1 - A non-manager can therefore read attendee names, usernames, registration dates and statuses for events they do not manage, including lists belonging to unpublished events...

CVE-2026-77990 Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager 5.0.1 - A non-manager can therefore read attendee names, usernames, registration dates and statuses for events they do not manage, including lists belonging to unpublished events...

CVE-2026-77990

Joomla Event Manager (a Joomla extension) before 5.0.1 contains an access control flaw in its attendee list feature. Any logged-in user who is not the event manager can read attendee names, usernames, registration dates, and statuses for events they do not manage, including those belonging to unp...

CVE-2026-77989 Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager 5.0.1 - buildCurrentPdfLink copies the current request query string into the PDF button URL, and pdfbutton echoes it unescaped, leading to an reflected XSS vector...

CVE-2026-77989 Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager 5.0.1 - buildCurrentPdfLink copies the current request query string into the PDF button URL, and pdfbutton echoes it unescaped, leading to an reflected XSS vector...

CVE-2026-77989

This is a reflected XSS in the Joomla Events Manager extension prior to version 5.0.1 . The root cause lies in the buildCurrentPdfLink function, which copies the current request query string into the PDF button URL, and pdfbutton() echoes it without escaping, creating a reflected XSS vector via t...

EUVD-2026-66862

Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager 5.0.1 - buildCurrentPdfLink copies the current request query string into the PDF button URL, and pdfbutton echoes it unescaped, leading to an reflected XSS vector...

EUVD-2026-66858

Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events SSE with view fragments. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...

CVE-2026-47890

Spring Framework versions 7.0.0–7.0.8 and 6.2.0–6.2.19 are affected by a stream corruption issue when Server-Sent Events (SSE) are used with view fragments in Spring MVC and WebFlux applications. The NVD-assigned CVSS 3.1 score is 9.8 (Critical) , while the vendor (Spring) classifies it as LOW se...

content-packs

Content Packs für Eventum Sofort einsatzbereite Generator-Projekte für Eventum, die realistische synthetische Ereignisse erzeugen, die echte SIEM-Datenquellen nachahmen. Jeder Generator gibt ECS-kompatibles JSON aus, das direkt in Elasticsearch, OpenSearch oder jede andere SIEM-Plattform...

Axiom-protocol

Axiom: Protocollo di Comunicazione Decentralizzato e Resistente alla Censura 🚀 Dettagli del Deployment dal Vivo Rete: Arbitrum One Mainnet L2 Chain ID: 42161 Endpoint RPC: https://arb1.arbitrum.io/rpc o qualsiasi endpoint personalizzato Alchemy/Infura Indirizzo del Contratto Proxy Axiom:...

agentsh

agentsh Hinweis für macOS: Die native macOS-Durchsetzung über ESF Endpoint Security Framework + NE Network Extension befindet sich im Alpha -Stadium. Sie funktioniert Ende-zu-Ende — Datei-, Prozess- und Netzwerkereignisse fließen über die Systemerweiterung in die Go-Policy-Engine — aber erwarten...

faraday

Open Source Vulnerability Manager Security has two difficult tasks: designing smart ways of getting new information, and keeping track of findings to improve remediation efforts. With Faraday, you may focus on discovering vulnerabilities while we help you with the rest. Just use it in your termin...

audit-kernel

Sottosistema Audit del Kernel Linux https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git https://github.com/linux-audit/audit-kernel Il sottosistema di audit di Linux fornisce un framework di logging sicuro utilizzato per catturare e registrare eventi rilevanti per la sicurezza. È...

PT-2026-82163

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/vfio ccw component where the CRW region, which relies exclusively on asynchronous events from hardware, lacks a proper locking mechanism. This necessitates th...

Linux Distros Unpatched Vulnerability : CVE-2026-74753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf: Reject exited events as group leaders perfeventremoveonexec sets remove-on-exec events to the EXIT state and detaches their group relationships. The event...

CVE-2026-53965 MCP PHP SDK: Unbounded SSE buffer in HttpTransport enables client-side denial of service

The MCP PHP SDK Composer package mcp/sdk is the official Model Context Protocol SDK for PHP. In versions 0.5.0 through 0.7.0, the HTTP client transport reads a Server-Sent Events response stream incrementally and appends each chunk to an in-memory buffer with no upper bound. The buffer is only...