CVE-2026-81929: Improper Neutralization of Input During Web Page Generation

The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.5.4, and 1.8.0, respectively, due to insufficient authorization, input sanitization, and output escaping in the...

CVE-2026-94684

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive detection...

CVE-2026-94684

...

CVE-2026-94684

...

CVE-2026-94684

This CVE ID is rejected and does not represent an active vulnerability entry.

EUVD-2026-85487

Contributor Cross Site Scripting XSS in Ocean Extra = 2.6.1 versions...

WordPress Ocean Extra plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Ocean Extra versions = 2.6.1...

CVE-2026-94684: Undefined Security Weakness

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive detection...

PT-2026-97472

Contributor Cross Site Scripting XSS in Ocean Extra = 2.6.1 versions...

Friday Squid Blogging: Neon Flying Squid

The neon flying squid can fly in formation. The shoal of about 100 squid rose unexpectedly from a patch of the Pacific Ocean around 370 miles from Tokyo and glided near the boat for about 30 metres. The astonished researchers were the first to capture photographs of such a thing, which looked lik...

CVE-2026-72579 NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data Server

An OS command injection vulnerability in NASA HyperCP main branch allows a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov to execute arbitrary system commands on the researcher's workstation...

CVE-2026-72579 NASA HyperCP - OS Command Injection via Malicious HTTP Response from Data Server

An OS command injection vulnerability in NASA HyperCP main branch allows a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov to execute arbitrary system commands on the researcher's workstation...

PT-2026-53571

Summary PyLoad's download engine accepts arbitrary URLs without validation, enabling Server-Side Request Forgery SSRF attacks. An authenticated attacker can exploit this to access internal network services and exfiltrate cloud provider metadata. On DigitalOcean droplets, this exposes sensitive...

io.jenkins.blueocean:blueocean (>=1.0-alpha-3, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-3, <=1.0.0-b21) +6 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1.8.1)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-3, =1.0-alpha-3, =1.0-alpha-3,...

io.jenkins.blueocean:blueocean (1.0.0-b19-beta-1), io.jenkins.blueocean:blueocean-dashboard (1.0.0-b19-beta-1) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.1-beta-2)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.1-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean 1.0.0-b19-beta-1 -...

io.jenkins.blueocean:blueocean (>=1.0.0-b20-beta-1, <=1.0.0-b21-beta-1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b20-beta-1, <=1.0.0-b21-beta-1) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.1-beta-4)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.1-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b20-beta-1, =1.0.0-b20-beta-...

io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b22, <=1.0.0-b24) +6 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.1)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b22, =1.0.0-b22, =1.0.0-b22,...

io.jenkins.blueocean:blueocean (1.0.0-b25), io.jenkins.blueocean:blueocean-dashboard (1.0.0-b25) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.3)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean 1.0.0-b25 -...

io.jenkins.blueocean:blueocean (>=1.0.0-rc1, <=1.0.1), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-rc1, <=1.0.1) +6 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (2.0.4)

org.jenkins-ci.plugins:github-branch-source MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1,...

io.jenkins.blueocean:blueocean (>=1.27.17, <=1.27.18), io.jenkins.blueocean:blueocean-bitbucket-pipeline (>=1.27.17, <=1.27.18) +5 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1807.v50351eb_7dd13)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1807.v50351eb7dd13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.blueocean:blueocean =1.27.17, =1.27.17, =1.27.17,...