EUVD-2019-20202

Renovate versions = 13.87.0 and = 19.38.6 leak temporary repository tokens into pull request comments during certain Go Modules update failure scenarios. The issue is fixed in version 19.38.7. Anyone able to view the affected pull request comments could obtain the exposed tokens...

curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

A flaw was found in curl. When an OAuth2 bearer token is used for an HTTPS transfer that redirects to a second URL, curl could unintentionally leak the token. This occurs if the second hostname has entries in the .netrc file, allowing the bearer token intended for the first host to be sent to the...

EUVD-2026-62397

Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms 2.4.3.2 - CWE-94 / CWE-95 | CVSS 3.1: 9.8 Critical AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H The form's optional custom-PHP post-submission handler is executed via eval. The URL parameter = X shortcode is substituted with the...

GHSA-V2WP-FRMC-5Q3V

creationtimestamp| type| source ---|---|--- 2026-08-19 07:31:59+00:00| seen| https://gist.github.com/alon710/048e89a8b6d23388e5627d9e6207e2ad...

Vulnerabilities in Mattermost

Mattermost, Inc. has identified vulnerabilities in Mattermost versions 10.11.x, 11.7.x, and 11.8.x, including the GitLab plugin up to version 11.8. These vulnerabilities relate to various aspects of the Mattermost software, such as incorrect validation of WebSocket command fields, incorrect...

CVE-2026-14287

The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape attacker-supplied stylesheet content before rendering it into the page head, allowing an unauthenticated attacker to store markup that executes as...

EUVD-2026-62263

The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape attacker-supplied stylesheet content before rendering it into the page head, allowing an unauthenticated attacker to store markup that executes as...

CVE-2026-14287 TenWeb Speed Optimizer < 2.33.5 - Unauthenticated Stored XSS via Critical CSS Token Bypass

The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape attacker-supplied stylesheet content before rendering it into the page head, allowing an unauthenticated attacker to store markup that executes as...

CVE-2026-14287 TenWeb Speed Optimizer < 2.33.5 - Unauthenticated Stored XSS via Critical CSS Token Bypass

The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape attacker-supplied stylesheet content before rendering it into the page head, allowing an unauthenticated attacker to store markup that executes as...

CVE-2026-14287

The 10Web Booster (also referred to as TenWeb Speed Optimizer) WordPress plugin, in versions prior to 2.33.5 , is vulnerable to unauthenticated stored Cross-Site Scripting (XSS) . The root cause is a failure to correctly validate an access token on an unauthenticated request handler, combined wit...

Malicious code in react-dom-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fae606be0dbd7c79552511c2553ec9e1d081df1279f0bc85502a6c08c0f17fb Package name typosquats react-dom. On require'react-dom-helpers/client', client.js decodes a base64-obfuscated Slack bot token and channel ID,...

Malicious code in bazelisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bcbd35130e716d1a2940c91b6691d41b9655fdc8587404af37bc6e5a7f1370 This npm package uses the name bazelisk, colliding with Google's bazelbuild/bazelisk project referenced in the tarball's source.txt, and self-labels ...

Malicious code in test_payload_folder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866092759174b326eced94e3854f31ba300d25d84387348e6b33119f4aa12caf The package exposes a startVoiceJoinerconfig API that accepts a caller-supplied Discord USERTOKEN and optional USERTOKEN2 ostensibly for gateway logi...

MAL-2026-14191 Malicious code in test_payload_folder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866092759174b326eced94e3854f31ba300d25d84387348e6b33119f4aa12caf The package exposes a startVoiceJoinerconfig API that accepts a caller-supplied Discord USERTOKEN and optional USERTOKEN2 ostensibly for gateway logi...

PT-2026-78281

Name of the Vulnerable Software and Affected Versions User Verification by PickPlugins WordPress plugin versions prior to 2.0.48 Description The plugin fails to verify if a request to resend a verification email is authorized for the specified user and does not bind the protection token to that...

Oracle Linux 9 : curl (ELSA-2026-55439)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55439 advisory. - fix HTTP Negotiate connection reuse auth bypass CVE-2026-1965 - fix OAuth2 bearer token leak via redirect and netrc CVE-2026-3783 - fix SSH host key...

PT-2026-78818

Name of the Vulnerable Software and Affected Versions Splunk AI Toolkit versions prior to 6.0.0 Description Improper privilege management in the Agent Run History handler allows users without admin or power roles to execute searches with system-level privileges. This occurs because the handler...

PT-2026-78816

Name of the Vulnerable Software and Affected Versions Cisco Talos Intelligence for Enterprise Security Cloud versions prior to 1.0.3 Description A user with the get talos enrichment capability can send a crafted request to the Talos intelligence enrichment REST API endpoint, forcing the instance ...

CVE-2026-14287: Improper Neutralization of Input During Web Page Generation

The 10Web Booster WordPress plugin before 2.33.5 does not correctly validate an access token on an unauthenticated request handler and does not escape attacker-supplied stylesheet content before rendering it into the page head, allowing an unauthenticated attacker to store markup that executes as...

PT-2026-78446

Name of the Vulnerable Software and Affected Versions Cudy WR3000 2.0 versions prior to 2.5.24 Description The Mosquitto MQTT broker authentication plugin contains a hard-coded JWT HMAC signing secret. This allows unauthenticated attackers to extract the secret from the firmware image and forge...