CVE-2026-19056 ProSolution WP Client < 2.0.11 - Reflected XSS via 'page' Parameter

The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter before reflecting it into an HTML attribute on one of its administrative pages, leading to reflected Cross-Site Scripting that runs in the session of an administrator induced to submit a crafted...

EUVD-2026-62276

The TabaPay Gateway WordPress plugin through 1.4.0 does not validate the payment callback before establishing a session for the account associated with the referenced order, allowing unauthenticated attackers to log in as any registered user, including an administrator...

CVE-2026-18031 TabaPay Gateway <= 1.4.0 - Unauthenticated Account Takeover via Payment Callback

The TabaPay Gateway WordPress plugin through 1.4.0 does not validate the payment callback before establishing a session for the account associated with the referenced order, allowing unauthenticated attackers to log in as any registered user, including an administrator...

CVE-2026-18031

The TabaPay Gateway WordPress plugin (versions

CVE-2026-14334

The Booking calendar, Appointment Booking System WordPress plugin versions prior to 3.2.37 is vulnerable to an unauthenticated stored XSS vulnerability. The root cause is the failure to properly sanitize uploaded SVG files , which allows an attacker to bypass the plugin's script-stripping mechani...

EUVD-2026-62264

The Booking calendar, Appointment Booking System WordPress plugin through 3.2.36 does not properly sanitize uploaded SVG files, allowing unauthenticated attackers to upload a file that bypasses the Booking calendar, Appointment Booking System WordPress plugin through 3.2.36's script-stripping and...

Billion 5200W-T - Remote Command Injection

Unauthenticated or authenticated OS command injection in Billion 5200W-T via advremotelog.asp or toolstime.asp. Spawns utelnetd and opens a framework shell session. !/usr/bin/env python3 -- coding: utf-8 -- """Billion 5200W-T remote command injection — opens framework shell session.""" from...

Grandstream GXV3611 HD - Telnet SQL Injection

SQL injection in the Grandstream GXV3611 HD telnet login resets the admin password to 'a', triggers the !/ port lol backdoor on TCP/20000, then opens a framework shell session. !/usr/bin/env python3 -- coding: utf-8 -- """Grandstream GXV3611 HD telnet SQLi — opens framework shell session.""" impo...

MAL-2026-14259 Malicious code in ranux-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dde928a7de2064f13b18847a56607605bd33f1331a57bb0be0ccf585fa5d86f package.json declares the dependency @whiskeysockets/baileys but resolves it from github:rcedubot/X instead of the npm registry. Installing ranux-dev...

Malicious code in ranux-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dde928a7de2064f13b18847a56607605bd33f1331a57bb0be0ccf585fa5d86f package.json declares the dependency @whiskeysockets/baileys but resolves it from github:rcedubot/X instead of the npm registry. Installing ranux-dev...

MAL-2026-14242 Malicious code in electro-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c16137bdd5ac7c97d450fb8ff77103d9c6421f78848b1017f84348c6ec3762 [email protected] presents itself as 'Session utilities' 170-byte README but ships 1MB of heavily obfuscated JavaScript under dist/ index.js,...

Malicious code in electro-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c16137bdd5ac7c97d450fb8ff77103d9c6421f78848b1017f84348c6ec3762 [email protected] presents itself as 'Session utilities' 170-byte README but ships 1MB of heavily obfuscated JavaScript under dist/ index.js,...

Malicious code in deepface-weights (PyPI)

Source: amazon-inspector 9c1cf8a0f273b75a4cf2b66c9b9fc351023b9f77d61e82c74d74534424ce0558 On import, deepfaceweights starts a daemon thread that polls every 10 seconds for the file data/telethonmarketuserbot.session in the current working directory. When found, it POSTs the session file together...

EUVD-2026-62206

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...

CVE-2026-76366: Exposure of Sensitive Information to an Unauthorized Actor

In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representational State Transfer REST API filtering on playbook runs to recover session tokens that compromise all data available to the affected user. The information disclosure is possible because Splunk SOAR...

CVE-2026-76338: Improper Authentication

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has access to a trusted distributed search private key could forge an administrative session token, access all relevant data, affect system integrity, and disrupt service availability. The...

PT-2026-78361

Name of the Vulnerable Software and Affected Versions nnn version 5.2 Description An Out-of-Bound write issue exists due to insufficient validation of attacker-controlled length fields during the deserialization of session files. When a crafted session file is loaded using the -s option, the...

CVE-2026-76312: Improper Access Control

In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who can read the Hypertext Markup Language HTML source of a page that embeds a Splunk report could use exposed session material to access all relevant data and affect system integrity. The vulnerabilit...

PT-2026-78435

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 8.3.0 Description A reflected cross-site scripting issue exists in the patient portal template import handler. The templateHtml GET parameter is reflected in the page response without proper sanitization. This allows ...

PT-2026-78793

In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representational State Transfer REST API filtering on playbook runs to recover session tokens that compromise all data available to the affected user. The information disclosure is possible because Splunk SOAR...