EUVD-2026-91023

The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once...

CVE-2026-73570

CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview Field| Value ---|--- CVE| CVE-2026-73570 CVSS 3.1| 8.9 HIGH — AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L CWE|...

OpenCVE: Server-Side Request Forgery (SSRF) in notifications

ImpactOpenCVE contains a Server-Side Request Forgery SSRF vulnerability in the notification testing functionality for both Webhook and Slack integrations.An authenticated user with permission to configure notification channels can trigger test requests to arbitrary HTTPS endpoints. Insufficient...

CVE-2026-9806

CVE-2026-9806 CVE-2026-9806 es una vulnerabilidad de Cross-Site Scripting almacenado Stored XSS que afecta a las versiones de CTI Transmute anteriores a la versión parcheada. El fallo existe en el panel de notificaciones, donde los mensajes de notificación que contienen nombres de conversión...

zeekjs-notice-telegram

Zeek Notice Telegram edición ZeekJS Este paquete reimplementa zeek-notice-telegram en TypeScript ZeekJS para sortear la falta de fiabilidad de ActiveHTTP. Toma prestado tanto el paquete de Yacin mencionado anteriormente como la reimplementación ZeekJS de la inspiración original de ese paquete...

changedetection.io

Detecta cambios en sitios web automáticamente — Monitorea cambios en páginas web en tiempo real Monitorea sitios web en busca de actualizaciones — recibe notificaciones vía Discord, Email, Slack, Telegram, Webhook y muchos más. Detecta cambios en el contenido de páginas web y recibe alertas...

CVE-2026-103496: Authorization Bypass Through User-Controlled Key

In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications...

CVE-2026-102666: Use of Hard-coded Credentials

The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once...

Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2022_8547)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20228547 advisory. Mozilla: Service Workers might have learned size of cross-origin media files CVE-2022-45403 Mozilla: Fullscreen notification bypass CVE-2022-45404 Mozilla:...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2022_8554)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20228554 advisory. Mozilla: Service Workers might have learned size of cross-origin media files CVE-2022-45403 Mozilla: Fullscreen notification bypass CVE-2022-45404 Mozilla:...

CVE-2026-102142

The Kiteworks appliance is vulnerable to Remote Code Execution due to a Server-Side Template Injection flaw in the system notification template rendering process. The underlying cause is a template engine that evaluates expressions contained within the stored template body. An authenticated Syste...

CVE-2026-102142 Kiteworks Core Remote Code Execution through Server-Side Template Injection

A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the stored template body. An authenticated System Administrator could potentially store a crafted template that executed operating-system commands on the appliance...

CVE-2026-100275

In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible...

CVE-2026-100277

In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature...

CVE-2026-100268

In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templates...

CVE-2026-100274

In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template...

CVE-2026-100272

In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues...

CVE-2026-100262

In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates...

CVE-2026-100277

In JetBrains YouTrack versions prior to 2026.2.19197 , an account takeover is possible due to an incorrect authorization vulnerability. The root cause involves the ability to replay a notification signature . Specific exploit details are not provided in the documentation. Remediation is available...

CVE-2026-100277

In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature...