1818 matches found
WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android
Meta on Tuesday announced a set of WhatsApp account security features, including support for multiple passkeys to a single account to help users with both iOS and Android devices sign into their accounts using the phishing-resistant method. The tech giant said more than 1 billion people use a...
WordPress 12 Step Meeting List Plugin <= 3.14.33 - Cross-Site Scripting
Code for Recovery 12 Step Meeting List versions up to 3.14.33 contain a reflected cross-site scripting caused by improper input neutralization during web page generation, letting attackers execute malicious scripts in users' browsers, exploit requires attacker to craft a malicious URL. id:...
CVE-2026-66584
Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...
CVE-2026-66584
An unauthenticated Cross-Site Scripting (XSS) vulnerability affects the WordPress plugin 12 Step Meeting List in versions 3.19.16 and earlier , as reported by researcher V1T via PatchStack. The CVSS 3.1 base score is 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, indicating a ne...
CVE-2026-66584 WordPress 12 Step Meeting List plugin <= 3.19.16 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...
EUVD-2026-64830
Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...
WordPress 12 Step Meeting List plugin <= 3.19.16 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin 12 Step Meeting List versions = 3.19.16...
CVE-2026-53614
A flaw was found in util-linux. The mount8 SUID binary does not sanitize the LIBMOUNTFORCEMOUNT2 environment variable before use. A local unprivileged user can set this variable to force mount8 to use the legacy two-step mount2 code path, which applies security restrictions such as nosuid and...
vim: Vim: Arbitrary code execution via crafted step-definition patterns
A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition...
GO-2025-3770 vulnerabilities
Vulnerabilities for packages: step-ca-fips, step-issuer, tkn, tkn-fips, caddy-fips, telegraf, sftpgo, cloudflared, kyverno-policy-reporter-ui, rclone-fips, step, gitness, kyverno-policy-reporter-ui-fips, gogatekeeper, step-fips, karma, rclone, step-ca, step-issuer-fips, buf, caddy, dapr, dapr-fip...
GO-2025-4068 vulnerabilities
Vulnerabilities for packages: caddy, step-ca-fips, step-issuer, step, caddy-fips, step-fips, step-issuer-fips, step-ca...
GO-2026-4458 vulnerabilities
Vulnerabilities for packages: caddy, step-ca-fips, step-issuer, step, caddy-fips, step-fips, step-issuer-fips, step-ca...
GO-2026-4775 vulnerabilities
Vulnerabilities for packages: caddy, step-ca-fips, caddy-fips, frankenphp-8.4, frankenphp-8.2, step-issuer-fips, frankenphp-8.5, frankenphp-8.3...
GO-2026-4399 vulnerabilities
Vulnerabilities for packages: cert-manager-webhook-pdns, step-issuer, cert-manager-istio-csr, cert-manager-openshift-routes, cert-manager-google-cas-issuer-fips, opentelemetry-operator-fips, mariadb-operator, gitlab-operator-fips, percona-xtradb-cluster-operator-fips, aws-privateca-issuer-fips,...
GO-2024-3282 vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl, cert-manager-webhook-pdns, cert-manager-webhook-pdns-fips, step-issuer, cert-exporter, cert-exporter-fips, aws-privateca-issuer-fips, cert-manager-istio-csr, cert-manager-cmctl-fips, aws-privateca-issuer, step-issuer-fips...
GO-2024-2605 vulnerabilities
Vulnerabilities for packages: trillian-fips, wavefront-collector-for-kubernetes, caddy, kots, argo-workflows, caddy-fips, argo-workflows-fips, step, trillian, step-ca...
GO-2025-3372 vulnerabilities
Vulnerabilities for packages: opa-fips-envoy, step-ca-fips, kyverno, step-issuer, opa-fips, cert-exporter, portieris, caddy-fips, smarter-device-manager, crossplane-provider-gcp, pulumi, sigstore-scaffolding-fips, nfs-subdir-external-provisioner, flux-image-reflector-controller-fips,...
GO-2024-2978 vulnerabilities
Vulnerabilities for packages: spire-server, k8sgpt-operator, tempo, sigstore-scaffolding, zarf, opentelemetry-collector, terraform-provider-google, tflint, conftest, grpc-health-probe, dex, kaniko, spegel, kwok, dbmate, grafana-agent-operator, kubernetes-csi-driver-hostpath, terraform-docs,...