CVE-2026-32570 WordPress Progressify - Progressive Web App (PWA) plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Progressify - Progressive Web App PWA = 1.6.0 versions...

EUVD-2026-93233

Unauthenticated Cross Site Scripting XSS in Progressify - Progressive Web App PWA = 1.6.0 versions...

CVE-2026-32570 WordPress Progressify - Progressive Web App (PWA) plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Progressify - Progressive Web App PWA = 1.6.0 versions...

CVE-2026-32570

The Progressify - Progressive Web App (PWA) plugin for WordPress is affected by an unauthenticated Cross-Site Scripting (XSS) vulnerability in versions

PT-2026-106398

Name of the Vulnerable Software and Affected Versions Progressify - Progressive Web App PWA versions prior to 1.6.1 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior...

CVE-2026-32570: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Progressify - Progressive Web App PWA = 1.6.0 versions...

Astra Linux – Vulnerability in Chromium

In incorrect security user interfaces of web app installations in Google Chrome on Android before version 90.0.4430.212, an attacker who convinced a user to install a web application could inject scripts or HTML into a privileged page through a crafted HTML page...

WordPress Progressify - Progressive Web App (PWA) plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

WordPress Progressify - Progressive Web App PWA plugin = 1.6.0 - Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Progressify - Progressive Web App PWA versions = 1.6.0...

CVE-2026-49265 vulnerabilities

Vulnerabilities for packages: kserve, kubeflow-pipelines-visualization-server, jupyter-base-notebook, kubeflow-katib, kubeflow-volumes-web-app, kubeflow-pipelines, dask-kubernetes, datadog-agent, az, k8s-sidecar, open-webui, kubeflow-jupyter-web-app, ggshield...

GHSA-XPV3-W29H-X7CV vulnerabilities

Vulnerabilities for packages: kserve, kubeflow-pipelines-visualization-server, jupyter-base-notebook, kubeflow-katib, kubeflow-volumes-web-app, kubeflow-pipelines, dask-kubernetes, datadog-agent, az, k8s-sidecar, open-webui, kubeflow-jupyter-web-app, ggshield...

CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: jupyterhub-k8s-singleuser-sample, datadog-agent, openstack-keystone-2026.1-fips, dagster, metaflow-service, prefect, k8s-sidecar, kubeflow-katib, kubeflow-pipelines, dask-kubernetes-fips, kserve-xgbserver, metaflow-service-fips, open-webui, openstack-keystone-2025.2,...

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: jupyterhub-k8s-singleuser-sample, datadog-agent, openstack-keystone-2026.1-fips, dagster, metaflow-service, prefect, k8s-sidecar, kubeflow-katib, kubeflow-pipelines, dask-kubernetes-fips, kserve-xgbserver, metaflow-service-fips, open-webui, openstack-keystone-2025.2,...

CVE-2026-49264 vulnerabilities

Vulnerabilities for packages: kserve, kubeflow-pipelines-visualization-server, jupyter-base-notebook, kubeflow-katib, kubeflow-volumes-web-app, kubeflow-pipelines, dask-kubernetes, datadog-agent, az, k8s-sidecar, open-webui, kubeflow-jupyter-web-app, ggshield...

GHSA-HJ66-6F7G-4R5V vulnerabilities

Vulnerabilities for packages: kserve, kubeflow-pipelines-visualization-server, jupyter-base-notebook, kubeflow-katib, kubeflow-volumes-web-app, kubeflow-pipelines, dask-kubernetes, datadog-agent, az, k8s-sidecar, open-webui, kubeflow-jupyter-web-app, ggshield...

Google’s location data privacy failures draw a €403 million fine

The Irish Data Protection Commission DPC has fined Google €403 million $459 million for violating European privacy law. The penalty follows a six-year inquiry into Google’s management of user location data between May 2018 and February 2020. During that time, Google collected users’ location data...

Web-App-PenTesting

--- 🚀 Quick Start 1. Clone the repository bash git c...

Malicious Package

Overview liportal-web-app is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Astra Linux – Vulnerability in Tomcat9

URL redirection to untrusted sites “open redirect” vulnerability in FORM authentication with Apache Tomcat. This issue affects Apache Tomcat versions as follows: 11.0.0-M1 through 11.0.0-M10, 10.1.0-M1 through 10.0.12, 9.0.0-M1 through 9.0.79, and 8.5.0 through 8.5.92. Older, end-of-life versions...

web-app-pentest-travelbird

Web Application Penetration Test and Remediation: TravelBird A...

mobileAudit v3.2.0

Mobile Audit Security analysis for Android APKs, from upload to actionable findings. Mobile Audit is a Django application for static application security testing and malware inspection. It extracts APK metadata, detects risky implementation patterns, organizes findings by severity, and provides a...