CVE-2026-92967

The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword' parameter in versions up to, and including, 1.20.2. This is due to insufficient output escaping , which reads $GET'keyword', applies only sanitizetextfield which strips tags but leaves double quotes...

CVE-2026-92967 Pochipp <= 1.20.2 - Reflected Cross-Site Scripting via 'keyword' Parameter

The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword' parameter in versions up to, and including, 1.20.2. This is due to insufficient output escaping , which reads $GET'keyword', applies only sanitizetextfield which strips tags but leaves double quotes...

CVE-2026-92967

CVE-2026-92967 affects the Pochipp WordPress plugin in versions up to and including 1.20.2 . The vulnerability is a Reflected Cross-Site Scripting flaw in the keyword parameter. The root cause is insufficient output escaping: the code reads $_GET['keyword'], applies only sanitize_text_field() (wh...

CVE-2026-92967 Pochipp <= 1.20.2 - Reflected Cross-Site Scripting via 'keyword' Parameter

The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword' parameter in versions up to, and including, 1.20.2. This is due to insufficient output escaping , which reads $GET'keyword', applies only sanitizetextfield which strips tags but leaves double quotes...

EUVD-2026-83479

The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword' parameter in versions up to, and including, 1.20.2. This is due to insufficient output escaping , which reads $GET'keyword', applies only sanitizetextfield which strips tags but leaves double quotes...

CVE-2026-92967: Improper Neutralization of Input During Web Page Generation

The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword' parameter in versions up to, and including, 1.20.2. This is due to insufficient output escaping , which reads $GET'keyword', applies only sanitizetextfield which strips tags but leaves double quotes...

PT-2026-95748

Name of the Vulnerable Software and Affected Versions Pochipp versions prior to 1.20.3 Description The plugin is subject to Reflected Cross-Site Scripting, a flaw where an application includes untrusted data in a web page without proper validation or escaping. This occurs because the application...

CVE-2026-63449 Suricata sip: large SIP message bodies can evade detection with frame keyword

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SIP parser in rust/src/sip/parser.rs stores request and response body lengths in 16-bit fields. A SIP body larger than 65,536 bytes can truncate the...

CVE-2026-68531

Concrete CMS 9 before 9.5.3 is affected by an authenticated denial-of-service vulnerability in the keyword search filters used by the file manager, file folders, and page list. The root cause is that SQL LIKE wildcard metacharacters (e.g., single-character wildcards) were not escaped before being...

CVE-2026-68531 Concrete CMS below 9.5.3 is vulnerable to Authenticated Denial of Service via Unescaped SQL LIKE Wildcards in Keyword Search

Concrete CMS 9 before 9.5.3 did not escape SQL LIKE wildcard characters in the keyword search filters used by the file manager, file folders, and page list, allowing an authenticated user with editor-level or higher privileges to submit a crafted search containing many single-character wildcards...

CVE-2026-68531 Concrete CMS below 9.5.3 is vulnerable to Authenticated Denial of Service via Unescaped SQL LIKE Wildcards in Keyword Search

Concrete CMS 9 before 9.5.3 did not escape SQL LIKE wildcard characters in the keyword search filters used by the file manager, file folders, and page list, allowing an authenticated user with editor-level or higher privileges to submit a crafted search containing many single-character wildcards...

CVE-2026-68531 Concrete CMS below 9.5.3 is vulnerable to Authenticated Denial of Service via Unescaped SQL LIKE Wildcards in Keyword Search

Concrete CMS 9 before 9.5.3 did not escape SQL LIKE wildcard characters in the keyword search filters used by the file manager, file folders, and page list, allowing an authenticated user with editor-level or higher privileges to submit a crafted search containing many single-character wildcards...

CVE-2026-91991

A flaw was found in Tornado. An attacker can bypass security validation in the setcookie function by using capitalized or legacy keyword arguments. This allows the attacker to inject arbitrary cookie attributes, such as Domain or SameSite, and modify cookie security settings. The consequence is t...

CVE-2026-91991

Tornado (Python web framework) versions before 6.5.8 contain an incomplete fix for cookie attribute injection in the set_cookie function. An attacker can pass capitalized or legacy keyword arguments (e.g., Domain, Path, SameSite) to embed semicolon-delimited data, bypassing validation and modifyi...

CVE-2026-91991 Tornado before 6.5.8 Cookie Attribute Injection via Capitalized kwargs

Tornado before 6.5.8 contains an incomplete fix for cookie attribute injection that allows attackers to inject arbitrary cookie attributes by passing capitalized or legacy keyword arguments to setcookie. Attackers can embed semicolon-delimited data in capitalized parameters like Domain, Path, or...

OESA-2026-3749 openssh security update

An open source implementation of SSH protocol version 2 Security Fixes: In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.CVE-2026-73282 In sshd in OpenSSH before 10.5, the restrict keyword in authorizedkeys...

OESA-2026-3748 openssh security update

An open source implementation of SSH protocol version 2 Security Fixes: In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.CVE-2026-73282 In sshd in OpenSSH before 10.5, the restrict keyword in authorizedkeys...

OESA-2026-3746 openssh security update

An open source implementation of SSH protocol version 2 Security Fixes: In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.CVE-2026-73282 In sshd in OpenSSH before 10.5, the restrict keyword in authorizedkeys...

OESA-2026-3747 openssh security update

An open source implementation of SSH protocol version 2 Security Fixes: In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the...

CVE-2026-89497

A flaw was found in the Linux kernel's Orange File System orangefs client. The orangefspreparecdmarray function incorrectly calculates the buffer size for client debug keywords when an entry starts with a space. This can lead to a buffer overflow, allowing data to be written beyond the intended...