CVE-2026-68583: Improper Neutralization of Input During Web Page Generation

luci-app-adblock-fast before 1.2.4-4 contains a stored cross-site scripting vulnerability in the blocklist name field that allows lower-privileged users to inject active HTML. When an administrator views the AdBlock Fast status page, the injected payload executes in the administrator's browser...

PT-2026-63496

Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization...

EUVD-2025-37220

Nagios Log Server versions prior to 2024R2.0.3 contain an incorrect authorization vulnerability that allows non-administrator users to delete global dashboards. The application did not correctly enforce authorization checks for the global dashboard deletion workflow, enabling lower-privileged use...

EUVD-2021-11122

Malware in sbrugna...

EUVD-2021-11173

Malware in sbrugna...

EUVD-2021-24797

Malware in sbrugna...

EUVD-2021-11182

Malware in sbrugna...

EUVD-2021-11181

Malware in sbrugna...

EUVD-2021-11176

Malware in sbrugna...

EUVD-2021-11187

Malware in sbrugna...

EUVD-2021-11172

Malware in sbrugna...

EUVD-2021-11179

Malware in sbrugna...

EUVD-2021-11183

Malware in sbrugna...

EUVD-2021-11184

Malware in sbrugna...

EUVD-2021-11174

Malware in sbrugna...

EUVD-2021-11169

Malware in sbrugna...

EUVD-2022-35156

Malicious code in bioql PyPI...

EUVD-2021-31303

Malicious code in bioql PyPI...

CVE-2023-3410

The Bricks theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘customTag' attribute in versions up to, and including, 1.10.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with access to the Bricks Builder...

CVE-2022-2935

The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media Image URL value that can be added to an Image Hover in versions up to, and including, 9.7.3 due to insufficient input sanitization and output escaping. This makes it possible for...