CVE-2026-96531: Improper Neutralization of Input During Web Page Generation

The Optimole WordPress plugin before 4.2.13 does not escape unrecognized attributes of its video-player block before rendering them onto the block's wrapper element, allowing users with the Author role and above to store an event-handler attribute that executes scripts in the browser of any user,...

PT-2026-99311

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.4 Description An authorization omission exists in the siyuan-get IPC handler. This allows remote-kernel renderers to access native clipboard formats by invoking the clipboardReadMathML, clipboardReadOffice, and...

PT-2026-99244

Name of the Vulnerable Software and Affected Versions wp-review-slider-pro versions prior to 12.7.12 Description An issue exists where a value stored through an AJAX handler is not sanitized before being used in a SQL statement. The handler also lacks a capability check, which allows any...

PT-2026-99243

Name of the Vulnerable Software and Affected Versions wp-review-slider-pro versions prior to 12.7.12 Description The plugin fails to perform a capability check on the AJAX handler used to save review submission forms. Additionally, the nonce a unique token used to prevent replay attacks is...

SUSE CVE-2026-100071

In the Linux kernel, the following vulnerability has been resolved: net: hsr: free learned nodes on device setup failure hsrdevfinalize can fail after a lower-device RX handler has already been registered slave A is added before the failable slave B and interlink adds. RX handlers run in softirq...

CVE-2026-100388

RustDesk versions before 1.5.0 fail to properly validate file transfer permissions on incoming file clipboard messages in the Cliprdr message handler on Linux and macOS. Authenticated remote peers with disabled file transfer permissions can place files onto the host clipboard and retrieve copied...

CVE-2026-80432

A flaw was found in kitty. An authorization vulnerability allows a program running inside the terminal to access the contents of files dragged over the window, leading to unauthorized information disclosure. This issue occurs because the drag-and-drop handler fulfills file data requests without...

CVE-2026-95834

A flaw was found in kitty. A use-after-free vulnerability exists in the drag-and-drop protocol handler when an item transfer is prematurely aborted. A program running within the terminal window can supply a specially crafted byte stream to trigger an error path during data processing, causing the...

CVE-2026-97877

A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.createToken of the file application.yml of the component JWT Token Handler. This manipulation of the argument userid/companyid causes use of hard-coded password. The attack is...

DEBIAN-CVE-2026-67406

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.3.3, 4.2.9, 4.1.14, and 4.0.23, Shovel does not format state logged by the crash reporter and can leave unencrypted credentials in a crash dump file. the shovel worker genserver processes does not implement the formatstatus/2...

DEBIAN-CVE-2026-67230

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the Web STOMP WebSocket handler enforced neither maxframesize nor logintimeout before authentication, allowing an unauthenticated client to keep a connection alive with a slow stream of small frame...

CVE-2026-67230

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the Web STOMP WebSocket handler enforced neither maxframesize nor logintimeout before authentication, allowing an unauthenticated client to keep a connection alive with a slow stream of small frame...

AZL-105281 CVE-2026-67230 affecting package rabbitmq-server 3.13.7-9

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the Web STOMP WebSocket handler enforced neither maxframesize nor logintimeout before authentication, allowing an unauthenticated client to keep a connection alive with a slow stream of small frame...

UBUNTU-CVE-2026-67230

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the Web STOMP WebSocket handler enforced neither maxframesize nor logintimeout before authentication, allowing an unauthenticated client to keep a connection alive with a slow stream of small frame...

CVE-2026-95835

Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtain the text typed into a prompt that kitty itself displays, because handleremoteaskpass in kitty/window.py opens the POSIX shared memory...

CVE-2026-97877 zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password

A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.createToken of the file application.yml of the component JWT Token Handler. This manipulation of the argument userid/companyid causes use of hard-coded password. The attack is...

CVE-2026-97877 zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password

A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.createToken of the file application.yml of the component JWT Token Handler. This manipulation of the argument userid/companyid causes use of hard-coded password. The attack is...

EUVD-2026-87157

A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.createToken of the file application.yml of the component JWT Token Handler. This manipulation of the argument userid/companyid causes use of hard-coded password. The attack is...

CVE-2026-97877

The zhistaredu StarTraining software, up to version 3.8.1 , is vulnerable to a remote attack affecting the JWT Token Handler component. Specifically, a flaw in the UserLoginService.createToken function within the application.yml file allows for the manipulation of user_id or company_id arguments....

CVE-2026-67230 RabbitMQ: Web-STOMP unbounded pre-auth accumulation

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the Web STOMP WebSocket handler enforced neither maxframesize nor logintimeout before authentication, allowing an unauthenticated client to keep a connection alive with a slow stream of small frame...