83402 matches found
CVE-2026-88921
MISP (versions ≤2.5.45) contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, used during PDF report export via the convert_markdown_to_pdf module. The attribute(), objectAttribute(), object(), and tag() methods interpolated user-controlled fields (attribute type...
CVE-2026-88921 MISP: Unescaped HTML Injection in PDF Report Element Rendering
MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references attributes, objects, and tags into inline HTML during PDF report export via the convertmarkdowntopdf module. The attribute, objectAttribute,...
CVE-2026-88893
OpenPanel 's share lookup procedures fail to validate access controls, allowing unauthenticated callers who possess a share link to retrieve argon2id password hashes and full report configurations (event names, filters, breakdown dimensions). This enables offline password cracking and theft of bu...
CVE-2026-37004
creationtimestamp| type| source ---|---|--- 2026-09-10 12:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv634bqngq2f...
CVE-2026-84828
creationtimestamp| type| source ---|---|--- 2026-09-10 12:03:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dfxcpbhrx35ue 2026-09-11 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mvai73fffe22...
CVE-2026-8323
creationtimestamp| type| source ---|---|--- 2026-09-10 10:05:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cgolcynnqt54y 2026-09-10 10:08:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv5smfebby2n 2026-09-10 10:20:06+00:00| seen|...
CVE-2026-88285
creationtimestamp| type| source ---|---|--- 2026-09-10 10:03:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6knaxpydzctnd 2026-09-10 10:07:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv5sm2o7xx2n 2026-09-10 10:30:10+00:00| seen|...
nl-kat-coordination
================ What is OpenKAT? OpenKAT aims to monitor, record and analyze the status of information systems. The basic premise is that many of the major security incidents are caused by small errors and known vulnerabilities, and if you find them and resolve them in time your systems and...
chrome-vuln-scanner
Chrome Vulnerability Scanner A lightweight, dependency-free defensive tool that checks the installed Google Chrome version against known vulnerabilities and produces an easy-to-understand visual HTML report. Alat pertahanan ringan untuk memeriksa versi Google Chrome terhadap kerentanan yang...
CVE-2026-79941
creationtimestamp| type| source ---|---|--- 2026-09-10 03:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv53suqsbe2y...
InvenTree-Path-Traversal-CVE-2026-33531
CVE-2026-33531 — Path Traversal in InvenTree Report Templates Advisory: GHSA-rhc5-7c3r-c769 CVE: CVE-2026-33531 Severity: Medium Published: 2026-03-20 Credit: @alonaki Description A path traversal vulnerability in the report template engine allows a staff-level user to read arbitrary files from t...
PT-2026-89734
Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reports config permission can inject...
Linux Distros Unpatched Vulnerability : CVE-2026-61909
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href ACL. An authenticated DAV user with some shared access to anoth...
PT-2026-89404
OpenPanel share lookup procedures fail to validate access controls and return password hashes and protected report definitions to unauthenticated callers. Attackers with a share link can retrieve argon2id password hashes and full report configurations including event names, filters, and breakdown...
CVE-2026-87929
creationtimestamp| type| source ---|---|--- 2026-09-09 23:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4nbxmirj25 2026-09-14 15:37:19+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mvigutfurb2p...
CVE-2026-32722
CVE-2026-32722 XSS almacenado en Bloomberg Memray mediante metadatos de línea de comandos sin escapar Introducción Encontré este problema al revisar Memray , el perfilador de memoria de Python de Bloomberg, con una pregunta simple en mente: ¿Pueden los metadatos de tiempo de ejecución controlados...
CVE-2026-86098
creationtimestamp| type| source ---|---|--- 2026-09-09 19:40:16+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mv4c4nfww72f 2026-09-09 19:40:22+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117242777798627415...
nvidia-gpu-security-poc
NVIDIA GPU driver — two findings NVIDIA closed as expected behavior Proof-of-concept code and raw evidence for two findings in the NVIDIA Linux GPU driver, both reported through NVIDIA's VDP and both closed by NVIDIA as intended/expected behavior. Published so the behaviour is documented and...
DRUPAL-CONTRIB-2026-140
This module enables you to manage content deletion and provides reports for identifying orphaned content. The module doesn't sufficiently sanitize node titles when displaying the orphaned nodes report. This leads to a persistent cross-site scripting vulnerability XSS. This vulnerability is...