CVE-2025-30634

CVE-2025-30634 affects the WordPress plugin WP Featured Content Slider (WP Featured Content Slider) and is caused by Improper Neutralization of Input During Web Page Generation, enabling Stored XSS. The vulnerability targets WP Featured Content Slider versions up to and including 2.6 and is confi...

CVE-2024-52342

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Offshorent Solutions Pvt Ltd OS BXSlider os-bxslider allows Stored XSS.This issue affects OS BXSlider: from n/a through = 2.6...

CVE-2024-31574

Cross Site Scripting vulnerability in TWCMS v.2.6 allows a local attacker to execute arbitrary code via a crafted script...

CVE-2024-23518

Missing Authorization vulnerability in Navneil Naicker ACF Photo Gallery Field.This issue affects ACF Photo Gallery Field: from n/a through 2.6...

CVE-2024-32094

Cross-Site Request Forgery CSRF vulnerability in ChurchThemes Church Content – Sermons, Events and More.This issue affects Church Content – Sermons, Events and More: from n/a through 2.6...

CVE-2024-25098

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pascal Bajorat PB oEmbed HTML5 Audio – with Cache Support allows Stored XSS.This issue affects PB oEmbed HTML5 Audio – with Cache Support: from n/a through 2.6...

CVE-2023-39926

Unauth. Stored Cross-Site Scripting XSS vulnerability in Acurax Under Construction / Maintenance Mode from Acurax plugin = 2.6 versions...

CVE-2019-1010003

Leanote prior to version 2.6 is affected by: Cross Site Scripting XSS...

CVE-2025-47648

Cross-Site Request Forgery CSRF vulnerability in axima Pays – WooCommerce Payment Gateway axima-payment-gateway allows Stored XSS.This issue affects Pays – WooCommerce Payment Gateway: from n/a through = 2.6...

PT-2025-17199 · Jetbrains · Jetbrains Toolbox App

Name of the Vulnerable Software and Affected Versions: JetBrains Toolbox App versions prior to 2.6 Description: The issue concerns unencrypted credential transmission during SSH authentication. Recommendations: For versions prior to 2.6, update to version 2.6 or later to resolve the issue...

DEBIAN-CVE-2025-3001

A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstmcell. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used...

CVE-2025-28900

Cross-Site Request Forgery CSRF vulnerability in webgarb TabGarb Pro tabgarb allows Stored XSS.This issue affects TabGarb Pro: from n/a through = 2.6...

CVE-2025-28900

Cross-Site Request Forgery CSRF vulnerability in webgarb TabGarb Pro tabgarb allows Stored XSS.This issue affects TabGarb Pro: from n/a through = 2.6...

CVE-2025-28900 WordPress TabGarb Pro plugin <= 2.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in webgarb TabGarb Pro tabgarb allows Stored XSS.This issue affects TabGarb Pro: from n/a through = 2.6...

CVE-2025-28900

CVE-2025-28900 pertains to the WordPress plugin TabGarb Pro (

Nothing OS 安全漏洞

Nothing OS is an operating system from Nothing. A security vulnerability exists in Nothing OS version 2.6, which stems from a flaw in the NtBpfService component that could lead to elevated privileges for a local attacker...

PT-2025-6707 · Nothing Tech · Nothing Os

Name of the Vulnerable Software and Affected Versions: Nothing Tech Nothing OS version 2.6 Description: The issue allows a local attacker to escalate privileges via the NtBpfService component. Recommendations: For Nothing Tech Nothing OS version 2.6, at the moment, there is no information about a...

CVE-2024-0818

Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6...

Wireshark SEoL (2.6.x)

According to its version, Wireshark is 2.6.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable,...

PT-2024-10981 · Chatwoot · Chatwoot

Name of the Vulnerable Software and Affected Versions: chatwoot/chatwoot versions prior to 2.6 Description: A stored cross-site scripting XSS vulnerability was discovered, affecting the profile settings when a user uploads an SVG file containing a malicious XSS payload. When the avatar is opened ...