CVE ID :CVE-2026-74791 Published : Aug. 16, 2026, 2:16 p.m. | 4 hours, 31 minutes ago Description :Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to persist across reused contexts. Attackers can exploit request-dependent…
CVE ID :CVE-2026-74790 Published : Aug. 16, 2026, 2:16 p.m. | 4 hours, 31 minutes ago Description :Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext instances to expose members that should be hidden. Attackers can…
CVE ID :CVE-2026-74784 Published : Aug. 16, 2026, 2:16 p.m. | 4 hours, 31 minutes ago Description :Scriban before 7.2.0 contains a denial of service vulnerability in the array.insert_at function that allocates unbounded null entries without respecting LoopLimit or LimitToString constraints. Attackers…
CVE ID :CVE-2026-73056 Published : Aug. 16, 2026, 2:16 p.m. | 4 hours, 31 minutes ago Description :SiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vulnerability in the CheckAuth() middleware. The middleware accepts the API token (Conf.Api.Token)…
CVE ID :CVE-2026-73061 Published : Aug. 16, 2026, 2:16 p.m. | 4 hours, 31 minutes ago Description :Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify…
CVE ID :CVE-2026-19900 Published : Aug. 15, 2026, 5:16 p.m. | 1 hour, 24 minutes ago Description :A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unknown function of the file The manipulation leads to hard-coded credentials.…
CVE ID :CVE-2026-18500 Published : Aug. 15, 2026, 2:17 p.m. | 4 hours, 24 minutes ago Description :@fastify/jwt is a JSON Web Token plugin for Fastify. In versions before 10.2.2, a per-request verification key passed to request.jwtVerify({ key }) is silently overridden…
CVE ID :CVE-2026-18438 Published : Aug. 15, 2026, 10:16 a.m. | 8 hours, 24 minutes ago Description :The Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! plugin for WordPress is vulnerable to Remote Code Execution…
CVE ID :CVE-2026-16142 Published : Aug. 15, 2026, 9:16 a.m. | 9 hours, 24 minutes ago Description :The TrueBooker plugin for WordPress is vulnerable to Account Takeover in all versions up to, and including, 1.2.6. This is due to the add_front_user_update() AJAX…
CVE ID :CVE-2026-15826 Published : Aug. 15, 2026, 7:16 a.m. | 11 hours, 25 minutes ago Description :The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.16.4. This is due…