WordPress Image Hover Ultimate - Unauthenticated Settings Update

Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate versions = 9.6.1 WordPress plugin. id: CVE-2021-36888 info: name: WordPress Image Hover Ultimate - Unauthenticated Settings Update author: riteshs4hu severity:...

CVE-2024-23995

Beekeeper-Studio PoC A Proof-Of-Concept for CVE-2024-23995 vulnerability. 1.Vunerability Overview: Vulnerability Subject: RCE via XSS Vulnerability Version: = Beekeeper-Studio-4.1.13 Attack Type: Remote Code Execution Attack Vectors: To exploit the vulnerability, one must insert malicious scripts...

CVE-2026-78071

Stored XSS via Location Title in DPCalendar Free DPCalendar Free ≤ 10.11.2 — Author-Role User Bypasses Content Review to Inject Persistent XSS via Location Title, Triggered on Hover by Any Visitor -orange SUMMARY The $location-title field is rendered without htmlspecialchars in...

CVE-2026-9809

CVE-2026-9809 CVE-2026-9809 is a Stored Cross-Site Scripting Stored XSS vulnerability affecting Mautic 7 versions 7.0.0 through 7.1.1. The flaw exists in the Projects component, where project names are displayed as tags and hover popovers on administrative pages such as campaigns, emails, and for...

Astra Linux – Vulnerability in Chromium

The incorrect security UI in Tab Hover Cards in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted domain name. Chromium security severity: Low...

oscovida (>=0.2.1, <=0.2.5), voila (>=0.1.8, <=0.1.24) +6 more potentially affected by CVE-2026-86049 via jupyter-server (0.1.1)

jupyter-server PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - oscovida =0.2.1, =0.1.8, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2026-86049 Source advisory:...

AlmaLinux 9.2 [TuxCare] Security Update: thunderbird Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1779786876)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779786876 advisory. - NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacke...

oscovida (>=0.2.1, <=0.2.5), voila (>=0.1.8, <=0.1.24) +6 more potentially affected by CVE-2026-86049 via jupyter-server (0.1.1)

jupyter-server PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - oscovida =0.2.1, =0.1.8, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2026-86049 Source advisory:...

ROS-20260915-73-0064

The vulnerability of the Tab Hover Cards component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to replace a domain name using a created domain name...

Astra Linux – Vulnerability in Thunderbird

When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only the last link is displayed when the mouse hovers over any attachment. Although the correct link is used upon clicking, the misleading hover text may lead users to download conten...

Malicious code in @atlaskit-internal_.smart-card/hover-card (npm)

--- Credit: OpenSSF source...

Malicious code in @atlaskit-internal_.smart-card/hover-card (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-10870 Malicious code in @atlaskit-internal_.smart-card/hover-card (npm)

--- -= Per source details. Do not edit below this line.=-...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), cifar-10-model (7.4.0) +17 more potentially affected by CVE-2023-25667 via tensorflow-cpu (>=2.1.0, <=2.11.0)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.0b1, =0.1.2, =1.0.0, =0.0.4, =1.5.0, =0.1.3, =0.5.1, =0.102.0.dev0, =0.208.0.post1 and more Source cves: CVE-2023-25667 Source advisory: OSV:PYSEC-2026-3321...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), cifar-10-model (7.4.0) +17 more potentially affected by CVE-2023-25673 via tensorflow-cpu (>=2.1.0, <=2.11.0)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.0b1, =0.1.2, =1.0.0, =0.0.4, =1.5.0, =0.1.3, =0.5.1, =0.102.0.dev0, =0.208.0.post1 and more Source cves: CVE-2023-25673 Source advisory: OSV:PYSEC-2026-3281...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), cifar-10-model (7.4.0) +17 more potentially affected by CVE-2023-25676 via tensorflow-cpu (>=2.1.0, <=2.11.0)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.0b1, =0.1.2, =1.0.0, =0.0.4, =1.5.0, =0.1.3, =0.5.1, =0.102.0.dev0, =0.208.0.post1 and more Source cves: CVE-2023-25676 Source advisory: OSV:PYSEC-2026-3287...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), hover (>=0.1.2, <=0.2.4) +8 more potentially affected by CVE-2022-41910 via tensorflow-cpu (>=2.1.0, <=2.7.4)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.2, =0.0.4, =1.5.0, =0.5.1, =0.102.0.dev0, =1.5.2, =2.4.0 - tpu-tf2 1.0.0 Source cves: CVE-2022-41910 Source advisory: OSV:PYSEC-2026-3323...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), hover (>=0.1.2, <=0.2.4) +8 more potentially affected by CVE-2022-41902 via tensorflow-cpu (>=2.1.0, <=2.7.4)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.2, =0.0.4, =1.5.0, =0.5.1, =0.102.0.dev0, =1.5.2, =2.4.0 - tpu-tf2 1.0.0 Source cves: CVE-2022-41902 Source advisory: OSV:PYSEC-2026-3310...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), hover (>=0.1.2, <=0.2.4) +8 more potentially affected by CVE-2022-41908 via tensorflow-cpu (>=2.1.0, <=2.7.4)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.2, =0.0.4, =1.5.0, =0.5.1, =0.102.0.dev0, =1.5.2, =2.4.0 - tpu-tf2 1.0.0 Source cves: CVE-2022-41908 Source advisory: OSV:PYSEC-2026-3353...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), hover (>=0.1.2, <=0.2.4) +8 more potentially affected by CVE-2022-41909 via tensorflow-cpu (>=2.1.0, <=2.7.4)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.2, =0.0.4, =1.5.0, =0.5.1, =0.102.0.dev0, =1.5.2, =2.4.0 - tpu-tf2 1.0.0 Source cves: CVE-2022-41909 Source advisory: OSV:PYSEC-2026-3368...