CVE-2026-32561

Subscriber Privilege Escalation in Booking Hub = 1.3.0 versions...

CVE-2026-32561

CVE-2026-32561 is a Subscriber Privilege Escalation vulnerability in the WordPress Booking Hub plugin, affecting versions 1.3.0 and earlier . The flaw allows a low-privileged Subscriber user to escalate privileges, rated CVSS 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indica...

CVE-2026-32561 WordPress Booking Hub plugin <= 1.3.0 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Booking Hub = 1.3.0 versions...

CVE-2026-32561 WordPress Booking Hub plugin <= 1.3.0 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Booking Hub = 1.3.0 versions...

CVE-2026-58231

Script di rilevamento CVE-2026-58231 Strumento di rilevamento e verifica dei prerequisiti per CVE-2026-58231 — autorizzazione impropria nel componente Data Hub Adapter di SAP Commerce Cloud CVSS 10.0. Lo script esegue solo controlli non distruttivi. Non include né esegue payload di code injection...

chub-supply-chain-poc

Context Hub Supply Chain PoC Sicherheitslücke ohne Bereinigung inContext Hub @aisuite/chub v0.1.3 ermöglicht stille Abhängigkeitsinjektion durch die MCP-Dokumentationspipeline. Referenzen: CWE-94 Codeeinschleusung | CWE-829 Nicht vertrauenswürdige Kontrollsphäre | CWE-345 Unzureichende Überprüfun...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fixed a deadlock in the “disable” sysfs attribute. The show and store callback routines for the “disable” sysfs attribute in port.c acquire the device lock for the port’s parent hub. This can cause problems if another...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

safenet-soho-security-framework

SafeNet SOHO Security Framework SafeNet è un framework per Accesso Zero-Trust alla Rete ZTNA di livello produttivo, progettato specificamente per ambienti Small Office/Home Office SOHO. Orchestrando un overlay VPN sicuro e consapevole dell'identità che utilizza il protocollo WireGuard , SafeNet...

SafeForge

SafeForge – Wo Apps mit Vertrauen gebaut werden SafeForge ist ein Open-Source-Mobile-App-Hub , der auf GitLab basiert und es Entwicklern ermöglicht, mobile Anwendungen in einem sicheren, KI-verifizierten und vollständig verschlüsselten Ökosystem zu entwickeln, hochzuladen, zu teilen und...

PT-2026-81051

Name of the Vulnerable Software and Affected Versions Booking Hub versions 1.3.0 and earlier Description An issue exists that allows a user with Subscriber privileges to escalate their privileges within the system. Recommendations Update Booking Hub to a version later than 1.3.0...

chipicopwn

chipicopwn Exploit del bootloader per Google Nest Hub 2ª generazione elaine requisiti Google Nest Hub 2ª generazione Raspberry Pi Pico Hub USB alimentato o cavo USB a Y pico-sdk vedi la guida introduttiva per le istruzioni di installazione versioni supportate firmware di fabbrica 2020/12 - U-Boot...

CVE-2026-19221

CVE-2026-19221 affects the Forminator Forms WordPress plugin in versions before 1.57.0.5 . The vulnerability stems from a network-wide setting (identified in enrichment titles as the Hub Connector API Key ) that is not properly restricted to network administrators. This allows an administrator of...

CVE-2026-19221 Forminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite

The Forminator Forms WordPress plugin before 1.57.0.5 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

CVE-2026-75946

A potential security vulnerability has been identified in the OMEN Gaming Hub for versions prior to 1101.2608.0.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...

EUVD-2026-63971

A potential security vulnerability has been identified in the OMEN Gaming Hub for versions prior to 1101.2608.0.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...

CVE-2026-75946

A local privilege escalation vulnerability exists in HP OMEN Gaming Hub versions prior to 1101.2608.0.0 , caused by insufficient access controls . A local attacker with low privileges could exploit this to gain elevated access and potentially access confidential information. The CVSS 4.0 base sco...

CVE-2026-75946 OMEN Gaming Hub – Potential Escalation of Privilege & Information Disclosure

A potential security vulnerability has been identified in the OMEN Gaming Hub for versions prior to 1101.2608.0.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls...

EUVD-2026-63684

Kerberos Agent is an open source video surveillance management agent. Prior to version 3.6.26, the Kerberos Hub upload path sends the agent's Hub credentials in the custom X-Kerberos-Hub-PrivateKey and X-Kerberos-Hub-PublicKey request headers to the operator-configured Hub URL config.HubURI. The...

CVE-2026-50192

Kerberos Agent (open-source video surveillance agent) prior to v3.6.26 leaks the Hub private key (X-Kerberos-Hub-PrivateKey) to a cross-host redirect target. The UploadKerberosHub function in machinery/src/cloud/kerberos_hub.go uses a bare &http.Client{} without a CheckRedirect policy. Go's net/h...