26682 matches found
Pixel Update Bulletin—June 2026Stay organized with collectionsSave and categorize content based on your preferences.
The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2026-06-05 or later address all issues in this bulletin and all issues in the June 2026 Android Securit...
Pixel Watch Security Bulletin—June 2026Stay organized with collectionsSave and categorize content based on your preferences.
The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2026-06-05 or later address all issues in this bulletin and all issues in the June 2026 Android Security Bulletin. To learn how...
CVE-2026-8444: Improper Neutralization of Special Elements used in an SQL Command
The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'curselrevs' parameter of the wpfbfindreviews AJAX action in versions up to, and including, 12.6.8. This is due to the handler reading $POST'curselrevs' raw with no sanitization or type casting, then concatenatin...
PT-2026-49765
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.26 Description An exec allowlist bypass exists where authenticated operators can execute wrapper-level side effects outside the intended allowlisted command. This occurs because a command request reaching the...
CVE-2026-53848: Incomplete List of Disallowed Inputs
OpenClaw before 2026.5.26 contains an exec allowlist bypass vulnerability allowing authenticated operators to execute wrapper-level side effects outside allowlisted command intent. Attackers can craft command requests that bypass allowlist validation by leveraging transparent command wrappers to...
Android 17 Security Release NotesStay organized with collectionsSave and categorize content based on your preferences.
This Android Security Release Notes contains details of security vulnerabilities affecting Android devices which are addressed as part of Android 17. Android 17 devices with a security patch level of 2026-07-01 or later are protected against these issues Android 17, as released on AOSP, will have...
CVE-2016-20070 WordPress Booking Calendar Contact Form 1.0.23 Privilege Escalation Stored XSS
WordPress Booking Calendar Contact Form 1.0.23 contains privilege escalation and stored cross-site scripting vulnerabilities that allow authenticated users to modify plugin options and inject malicious scripts by failing to verify user privileges and sanitize input parameters. Attackers with...
How Much Can We Trust LLM Search Agents? Measuring Endorsement Vulnerability to Web Content Manipulation
Large language model LLM-based search agents synthesize open-web content into actionable recommendations on behalf of users, creating a risk that attacker-published pages are transformed into endorsed claims. We introduce SearchGEO, a controlled evaluation framework for measuring endorsement...
CVE-2026-52700: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in WCMultiShipping = 3.0.2 versions...
CVE-2026-52697: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Taskbuilder = 5.0.7 versions...
CVE-2026-49773: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in FV Flowplayer Video Player 7.5.51.7212 versions...
CVE-2026-49082: Insertion of Sensitive Information Into Sent Data
Subscriber Sensitive Data Exposure in Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons = 1.4.8 versions...
CVE-2026-48964: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System = 3.3.6 versions...
CVE-2026-48882: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in WP Time Slots Booking Form = 1.2.50 versions...
CVE-2026-48880: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in WP Job Portal = 2.5.2 versions...
CVE-2026-48870: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in King Addons for Elementor = 51.1.62 versions...
CVE-2026-42651: Missing Authorization
Subscriber Broken Access Control in Classified Listing = 5.3.9 versions...
CVE-2026-42378: Authentication Bypass Using an Alternate Path or Channel
Subscriber Broken Authentication in WP Full Stripe Free = 8.4.1 versions...