CVE ID :CVE-2026-71879 Published : Aug. 18, 2026, 6:19 p.m. | 40 minutes ago Description :Missing authentication in initial setup functionality left exposed until first reboot in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative…
Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari. To Read More Visit Read More
Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake’s public snowflakedb/snowflake-connector-net repository that it said could be exploited through a crafted GitHub issue to execute commands in a workflow containing internal Jira credentials. The issue was…
A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to achieve arbitrary code execution on susceptible sites. The vulnerability, tracked as CVE-2026-15748, is rated 9.8 out…
CVE ID :CVE-2026-74254 Published : Aug. 17, 2026, 6:18 p.m. | 33 minutes ago Description :Joomla Extension – joomlack.fr – SQL injection in Page Builder CK < 3.6.5 – The Joomla extension Page Builder CK is vulnerable to a SQL injection…
CVE ID :CVE-2026-73522 Published : Aug. 17, 2026, 6:18 p.m. | 33 minutes ago Description :COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array…
CVE ID :CVE-2026-74791 Published : Aug. 16, 2026, 2:16 p.m. | 4 hours, 31 minutes ago Description :Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to persist across reused contexts. Attackers can exploit request-dependent…
CVE ID :CVE-2026-74790 Published : Aug. 16, 2026, 2:16 p.m. | 4 hours, 31 minutes ago Description :Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext instances to expose members that should be hidden. Attackers can…
CVE ID :CVE-2026-74784 Published : Aug. 16, 2026, 2:16 p.m. | 4 hours, 31 minutes ago Description :Scriban before 7.2.0 contains a denial of service vulnerability in the array.insert_at function that allocates unbounded null entries without respecting LoopLimit or LimitToString constraints. Attackers…
CVE ID :CVE-2026-73056 Published : Aug. 16, 2026, 2:16 p.m. | 4 hours, 31 minutes ago Description :SiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vulnerability in the CheckAuth() middleware. The middleware accepts the API token (Conf.Api.Token)…