209073 matches found
CVE-2026-105875
The BdThemes Prime Slider – Addons For Elementor (bdthemes-prime-slider-lite ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation . This vulnerability affects versions from n/a through 4.6.2 ....
CVE-2026-105875 WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 4.6.2...
CVE-2026-105884 WordPress Rocket Lazy Load plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Media Rocket Lazy Load rocket-lazy-load allows Stored XSS.This issue affects Rocket Lazy Load: from n/a through 2.4.0...
EUVD-2026-94250
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Media Rocket Lazy Load rocket-lazy-load allows Stored XSS.This issue affects Rocket Lazy Load: from n/a through 2.4.0...
CVE-2026-105884 WordPress Rocket Lazy Load plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Media Rocket Lazy Load rocket-lazy-load allows Stored XSS.This issue affects Rocket Lazy Load: from n/a through 2.4.0...
CVE-2026-97294
The David Lingren Media LIbrary Assistant plugin for WordPress (versions through 3.41 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the Improper Neutralization of Input During Web Page Generation , which allows an attacker to inject malicious scripts. Exploitation...
CVE-2026-97294 WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41...
CVE-2026-89417
The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 6.3.10 . The root cause is insufficient input sanitization and output escaping regarding the 's' Search Parameter within the comments...
reproducing-CVE-2025-1489
إعادة إنتاج CVE-2025-1489 يحاكي هذا المستودع إعادة إنتاج ثغرة أمنية متعلقة بالويب CVE-2025-1489 في بيئة آمنة لعرض وممارسة مهاراتي في التحليل الجنائي/الثغرات. الثغرة الأمنية التي تم تحديدها وإعادة إنتاجها هي ثغرة تخزينية من نوع XSS في إضافة WordPress WP-Appbox الإصدار 4.5.4. يسمح الخلل بإدخال يتحك...
kernel: xfrm: input: hold netns during deferred transport reinjection
A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...
kernel: xfrm: input: hold netns during deferred transport reinjection
A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...
CVE-2026-106494
A flaw was found in the @backstage/backend-defaults package of Backstage. Improper input validation in cloud storage URL readers allows an attacker with write access to an associated cloud storage bucket to create specially crafted object names. Under certain deployment configurations, these name...
EUVD-2026-94123
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation...
EUVD-2026-94124
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command 'Code Injection' related to improper input validation...
kernel: xfrm: input: hold netns during deferred transport reinjection
A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...
CVE-2026-106299
An improper input validation flaw was found in the WebAudio component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/519211890...
moveit-transfer-2023-breach
Fuite de données massive de MOVEit Transfer 2023 Détails de l'incident Date de l'incident : mai–juin 2023 CVE: CVE-2023-34362 Type d'attaque : Injection SQL Acteur de la menace : groupe de rançongiciel Cl0p Résumé En mai 2023, une vulnérabilité d'injection SQL dans MOVEit Transfer a été exploitée...
CyberPanel - Command Injection
CyberPanel contains a command injection vulnerability in the /ftp/getresetstatus and /dns/getresetstatus endpoints.The vulnerability exists due to improper validation of the 'statusfile' parameter, which is directly used in a shell command.The security middleware only validates POST requests,...
Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager - Remote Code Execution
Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An...