Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake’s public snowflakedb/snowflake-connector-net repository that it said could be exploited through a crafted GitHub issue to execute commands in a workflow containing internal Jira credentials. The issue was…
A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to achieve arbitrary code execution on susceptible sites. The vulnerability, tracked as CVE-2026-15748, is rated 9.8 out…
CVE ID :CVE-2026-74254 Published : Aug. 17, 2026, 6:18 p.m. | 33 minutes ago Description :Joomla Extension – joomlack.fr – SQL injection in Page Builder CK < 3.6.5 – The Joomla extension Page Builder CK is vulnerable to a SQL injection…
CVE ID :CVE-2026-73522 Published : Aug. 17, 2026, 6:18 p.m. | 33 minutes ago Description :COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array…
CVE ID :CVE-2026-74791 Published : Aug. 16, 2026, 2:16 p.m. | 4 hours, 31 minutes ago Description :Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to persist across reused contexts. Attackers can exploit request-dependent…
CVE ID :CVE-2026-74790 Published : Aug. 16, 2026, 2:16 p.m. | 4 hours, 31 minutes ago Description :Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext instances to expose members that should be hidden. Attackers can…
CVE ID :CVE-2026-74784 Published : Aug. 16, 2026, 2:16 p.m. | 4 hours, 31 minutes ago Description :Scriban before 7.2.0 contains a denial of service vulnerability in the array.insert_at function that allocates unbounded null entries without respecting LoopLimit or LimitToString constraints. Attackers…
CVE ID :CVE-2026-73056 Published : Aug. 16, 2026, 2:16 p.m. | 4 hours, 31 minutes ago Description :SiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vulnerability in the CheckAuth() middleware. The middleware accepts the API token (Conf.Api.Token)…
CVE ID :CVE-2026-73061 Published : Aug. 16, 2026, 2:16 p.m. | 4 hours, 31 minutes ago Description :Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify…
CVE ID :CVE-2026-19900 Published : Aug. 15, 2026, 5:16 p.m. | 1 hour, 24 minutes ago Description :A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unknown function of the file The manipulation leads to hard-coded credentials.…