EUVD-2026-126042

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Stored XSS.This issue affects Dynamic User Directory: from n/a through 2.4...

CVE-2026-125856

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Reflected XSS.This issue affects Dynamic User Directory: from n/a through 2.4...

CVE-2026-125856 WordPress Dynamic User Directory plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Reflected XSS.This issue affects Dynamic User Directory: from n/a through 2.4...

CVE-2026-125856

The Sarah Giles Dynamic User Directory WordPress plugin (versions ≤ 2.4 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation , which allows an attacker to inject malicious scripts. This vulnerability impa...

EUVD-2026-125412

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Reflected XSS.This issue affects Dynamic User Directory: from n/a through 2.4...

PT-2026-146921

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Reflected XSS.This issue affects Dynamic User Directory: from n/a through 2.4...

Sarah Giles Dynamic User Directory deserialization injection vulnerability

Sarah Giles Dynamic User Directory 2.4 and earlier versions have a deserialization injection vulnerability. This vulnerability stems from PHP object injection, which may allow attackers to inject malicious objects and execute arbitrary code...

CVE-2026-42720

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

EUVD-2026-94263

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

PT-2026-107473

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

CVE-2026-42720: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4...

CVE-2025-62982: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Stored XSS.This issue affects Dynamic User Directory: from n/a through = 2.3...

CVE-2025-23631: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sarah Lewis Content Planner content-planner allows Reflected XSS.This issue affects Content Planner: from n/a through = 1.0...

Malicious code in down_load_ebook_dark_seduction_by_sarah_piper_t9dtx (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2167 Malicious code in down_load_ebook_dark_seduction_by_sarah_piper_t9dtx (npm)

--- -= Per source details. Do not edit below this line.=-...

sarah-p.nl Cross Site Scripting vulnerability OBB-3895910

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

How a 27-Year-Old Codebreaker Busted the Myth of Bitcoin’s Anonymity

Once, drug dealers and money launderers saw cryptocurrency as perfectly untraceable. Then a grad student named Sarah Meiklejohn proved them all wrong—and set the stage for a decade-long crackdown...

sarah-p.nl Cross Site Scripting vulnerability OBB-3729926

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sarah-p.nl Cross Site Scripting vulnerability OBB-3506156

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Friday Squid Blogging: Online Cephalopod Course

Atlas Obscura has a five-part online course on cephalopods, taught by squid biologist Dr. Sarah McAnulty. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...