EUVD-2026-84859

ClipBucket v5 before 5.5.3-182 contains a reflected cross-site scripting vulnerability in the sortlink helper function that fails to sanitize cat, sort, and time query parameters. Attackers can craft malicious requests with injected script payloads in these parameters to execute arbitrary...

CVE-2026-95812 ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Parameters

ClipBucket v5 before 5.5.3-182 contains a reflected cross-site scripting vulnerability in the sortlink helper function that fails to sanitize cat, sort, and time query parameters. Attackers can craft malicious requests with injected script payloads in these parameters to execute arbitrary...

CVE-2026-95812

ClipBucket v5 before version 5.5.3-#182 is vulnerable to a reflected cross-site scripting (XSS) vulnerability. The issue resides in the sort_link() helper function, which fails to properly sanitize the cat , sort , and time query parameters. An attacker can craft a malicious request containing an...

CVE-2026-77272 MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the OAuth error query parameter is passed to CallbackHandler.sendresponse in oauthsetup.py and interpolated into an HTML page without escaping. A crafted authorization callback can...

CVE-2026-77272 MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the OAuth error query parameter is passed to CallbackHandler.sendresponse in oauthsetup.py and interpolated into an HTML page without escaping. A crafted authorization callback can...

CVE-2026-77272 MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the OAuth error query parameter is passed to CallbackHandler.sendresponse in oauthsetup.py and interpolated into an HTML page without escaping. A crafted authorization callback can...

WordPress WPGraphQL Smart Cache plugin < 2.3.2 - Unauthenticated Persisted Query Registration and Alias Squatting vulnerability

Unauthenticated Persisted Query Registration and Alias Squatting vulnerability discovered by msfire in WordPress Plugin WPGraphQL Smart Cache versions 2.3.2...

CVE-2026-90990

Improper neutralization of newlines in filter values in the monitoring host and service list APIs in Checkmk 2.5.0p14 allows an authenticated user to inject additional Livestatus query headers, bypassing object visibility restrictions in count queries to infer information about hosts and services...

CVE-2026-88020: Improper Neutralization of Input During Web Page Generation

Autonomy Logic OpenPLC 3 is susceptible to an improper neutralization of input during web page generation vulnerability when the web interface attempts to route the program based on a query string parameter with no encoding...

PT-2026-96961

Name of the Vulnerable Software and Affected Versions MCMS versions 6.1.1 through 6.2.1 Description SQL injection occurs in the 'PageAction.verify' endpoint GET '/ms/mdiy/page/verify.do'. SQL injection is a type of vulnerability that allows an attacker to interfere with the queries that an...

CVE-2026-61685: Improper Neutralization of Special Elements used in an SQL Command

ReactPress is a publishing system for React developers. Prior to version 3.7.0, ReactPress API list endpoints build TypeORM QueryBuilder conditions using unsanitized HTTP query parameter names as SQL column identifiers e.g. article.$key . TypeORM parameterizes values but not column names, allowin...

PT-2026-97110

Name of the Vulnerable Software and Affected Versions ReactPress versions prior to 3.7.0 Description API list endpoints build TypeORM QueryBuilder conditions using unsanitized HTTP query parameter names as SQL column identifiers. Because TypeORM parameterizes values but not column names,...

ROS-20260922-73-0135

The vulnerability in postgresqlanonymizer17 is related to the failure to implement proper protection for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: c-ares (UTSA-2023-002302)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002302 advisory. c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom are unavailable, c-ares uses rand to generate random numbers used for DNS query ids. Th...

SUSE CVE-2026-72811

SiYuan versions = v3.7.2 contain a SQL injection vulnerability in the backlink/mention search query kernel/model/backlink.go, which concatenates stored block metadata title, name, alias, anchor text and the client-supplied keyword into a SQL MATCH/search statement while escaping only the...

VulnCheck KEV: CVE-2026-27960

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a privilege escalation vulnerability that can be exploited by unauthenticated attackers to query the API as any existing user, including the default admi...

PT-2026-96018

Name of the Vulnerable Software and Affected Versions Netcore NBR200V2 version 1.3.241127.071246 Description An issue in the Backup Restore component exists due to improper processing of the restore.cgi file. A remote attacker can achieve command injection by manipulating the QUERY STRING argumen...

PT-2026-96017

Name of the Vulnerable Software and Affected Versions Netcore NBR200V2 version 1.3.241127.071246 Description Command injection is possible via remote manipulation of the QUERY STRING argument within the Firmware Upgrade CGI Endpoint. This issue occurs in the /www/cgi-bin/upgrade endpoint...

ROS-20260921-73-0136

The vulnerability in pgadmin4 is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

EUVD-2026-83622

A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Affected by this issue is the function SearchEngine::buildHighlights of the file src/SearchEngine.php of the component Search Engine. Executing a manipulation of the argument Query can lead to cross site scripting. The attack may be launche...