Moodle Jitsi Meet 2.7-2.8.3 - Cross-Site Scripting

Moodle Jitsi Meet 2.7 through 2.8.3 plugin contains a cross-site scripting vulnerability via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject JavaScript code to be run by the application. id: CVE-2021-26812 info: name: Moodle...

Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88779

Severity - High Description of Problem A vulnerability has been discovered in Citrix NetScaler ADC formerly Citrix ADC and Citrix NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions: The following supported versions of NetScaler are affected by the...

CVE-2026-48611-EXPLOIT

CVE-2026-48611 – phpBB OAuth 계정 탈취 익스플로잇 인증 없는 계정 탈취 | CVSS 9.4 치명적 | 즉시 사용 가능 🔥 제공 항목 완벽하게 작동하는 Python 익스플로잇 — CVE-2026-48611용 대량 스캐너 — 수천 개의 대상 자동 점검 CSRF 페이로드 생성기 — 계정 탈취용 HTML 파일 생성 취약한 대상 반환 — 버전 및 OAuth 공급자 정보 포함 phpBB 3.3.0 3.3.16 에서 OAuth 활성화 시 작동 Google, Facebook, Bitly 기본적으로 무소음, 클린, 로그...

EUVD-2026-52744

@a2ui/webcore: openUrl permits javascript: URI execution via agent-supplied button actions...

Apache Log4j2 - Remote Code Injection

Apache Log4j2 Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations. id: CVE-2021-45046 info: name: Apache Log4j2 - Remote Code Injection author: ImNightmaree severity: critical description: Apache Log4j2 Thread Context Lookup Pattern is...

CVE-2021-22205

CVE-2021-22205 - GitLab 인증되지 않은 원격 코드 실행 CVE-2021-22205 는 GitLab Community Edition CE 및 Enterprise Edition EE에 영향을 미치는 치명적인 원격 코드 실행RCE 취약점입니다. 이 취약점은 타사 유틸리티 ExifTool 이 처리하는 업로드된 이미지 파일의 부적절한 검증에서 비롯됩니다. 공격자는 악의적인 파일을 조작하여 GitLab 서버에서 임의 명령 실행을 유발할 수 있습니다. 이 취약점은 CVSS 점수 10.0 심각을 받았으며, 실제 환경에서...

EUVD-2025-26672

Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Medium...

BIT-PYTHON-2024-6232 Regular-expression DoS when parsing TarFile headers

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

BIT-PYTHON-MIN-2024-6232 Regular-expression DoS when parsing TarFile headers

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

BIT-LIBPYTHON-2024-6232 Regular-expression DoS when parsing TarFile headers

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

Wordfence Intelligence Weekly WordPress Vulnerability Report (September 7, 2026 to September 13, 2026)

Last week, there were 260 vulnerabilities disclosed in 207 WordPress Plugins that have been added to the Wordfence Intelligence Vulnerability Database, and there were 147 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to...

Improving email security outcomes with real-world Microsoft Defender insights

Every benchmark tells a story. The most valuable ones tell us where to improve next. For five consecutive quarters Microsoft has published email security benchmarking reports to provide greater transparency into real-world protection outcomes. The results have shown strong Microsoft Defender...

CVE-2026-1731

BeyondTrust CVE-2026-1731 Scanner Professional Python scanner for detecting BeyondTrust Remote Support / Privileged Remote Access exposure. Developer: issam junior Telegram: https://t.me/arabhackerzgroup CVE-2026-1731 — BeyondTrust Remote Code Execution Vulnerability CVE-2026-1731 is a critical...

Oracle Critical Security Patch Update, September 2026 Review

Oracle released its September edition of Critical Security Patch Update. The update received patches for 673 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including...

vulnerabilities present in Oracle E-Business Suite

Oracle has identified 159 vulnerabilities in various Oracle E-Business Suite products, including Oracle Applications Framework, Oracle Document Management and Collaboration, Oracle Mobile Application Server, Oracle Alert, Oracle Application Object Library, Oracle Applications Manager, Oracle Bill...

Important: Red Hat Security Advisory: Red Hat Edge Manager Version 1.2.1 Security Update

Red Hat Edge Manager Version 1.2.1 Security Update Red Hat Edge Manager RHEM provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a...

Fedora 45 : python-jwcrypto (2026-6d094c5360)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6d094c5360 advisory. Low severity security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Fedora 44 : python-jwcrypto (2026-8caad572b0)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8caad572b0 advisory. Low severity security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

CVE-2026-73952

creationtimestamp| type| source ---|---|--- 2026-09-15 22:10:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnc6b3i22f 2026-09-23 09:50:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11 2026-09-23 14:07:07+00:00| seen|...

CVE-2026-83408

CVE-2026-83408 affects the Compiler component of Oracle GraalVM for JDK and Oracle GraalVM (part of Oracle Java SE). Affected supported versions are GraalVM for JDK 17: 23.0.13.1, GraalVM for JDK 21: 23.1.12.1, and GraalVM: 25.0.4.1. The vulnerability allows an unauthenticated attacker with netwo...