Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 6.8 CVE-2026-54303

n8n: Reflected XSS via Facebook, WhatsApp, and Microsoft Teams Trigger Webhook Verification Endpoints_CVE-2026-54303

n8n is an open source workflow automation platform. Prior to 2.24.0, an endpoint in the Meta and Microsoft Teams trigger nodes reflects a query par...

n8n-io n8n < 2.24.0 CVE
MEDIUM 5.5 4E361A66-0287-

Exploit for Path Traversal in Microsoft_4E361A66-0287-5D9D-9DA5-91D2EF34D2CB

🛡️ NimbusPWN-CVE-2022-29799-29800 - Test local privilege escalation security flaws 📖 About this tool This software helps security researchers stud...

N/A N/A GITHUBEXPLOIT
MEDIUM 5.4 CVE-2026-8378

Frontend File Manager Plugin <= 23.6 - Subscriber+ Stored Cross-Site Scripting via File Rename_CVE-2026-8378

The Frontend File Manager Plugin WordPress plugin through 23.6 does not sanitise nor escape a filename submitted to the frontend file-rename endpoi...

Unknown Frontend File Manager Plugin CVE
MEDIUM 6.8 CVE-2026-7842

Infility Global < 2.15.20 - Editor+ SQL Injection via orderby Parameter_CVE-2026-7842

The Infility Global Infility Global WordPress plugin before 2.15.20 for WordPress does not sanitize or validate the orderby and order parameters in...

Unknown Infility Global CVE
MEDIUM 6.9 CVE-2026-56762

Hono – Missing Cookie Name Validation in setCookie()_CVE-2026-56762

Hono before 4.12.12 does not validate cookie names on the write path in the setCookie(), serialize(), and serializeSigned() functions, allowing inv...

Hono Hono CVE
MEDIUM 6.3 CVE-2026-56376

ImageMagick – Heap Use-After-Free in Meta Coder_CVE-2026-56376

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a heap use-after-free in the meta coder: when memory allocation fails, a single byte is written ...

ImageMagick ImageMagick CVE
MEDIUM 6.8 CVE-2026-56301

Nuxt – Arbitrary File Read via World-Connectable vite-node IPC Socket on Linux_CVE-2026-56301

Nuxt 4.0.0 before 4.4.7 and 3.18.0 before 3.21.7, when running the development server (nuxt dev) on Linux, binds the vite-node IPC server to an abs...

Nuxt Nuxt 4.0.0 CVE
MEDIUM 6 CVE-2026-56275

Flowise – Server-Side Request Forgery via Execute Flow Base URL_CVE-2026-56275

Flowise before 3.1.0 contains a server-side request forgery vulnerability in the Execute Flow node that allows attackers to bypass security validat...

Flowise Flowise CVE
MEDIUM 5.3 CVE-2026-56263

Crawl4AI – Stored Cross-Site Scripting in Monitor Dashboard_CVE-2026-56263

Crawl4AI before 0.8.7 contains a stored cross-site scripting vulnerability in the monitor dashboard that renders crawl URLs and error messages via ...

Crawl4AI Crawl4AI CVE
MEDIUM 6.9 CVE-2026-56234

Capgo – Password Spraying via Public-Key Accessible Credential Validation Endpoint_CVE-2026-56234

Capgo before 12.128.2 contains a credential validation vulnerability in the POST /functions/v1/private/validate_password_compliance endpoint that i...

Capgo Capgo CVE