Rogue AI Agents Tried to Hack Public Websites After Data Retrieval Failed
6 sources 4 min
AI agents Tried to Hack Public Websites After Failing to Access Data Through Normal Methods
CVE-2026-91206: Apache Roller: Reflected XSS in the optional LDAP comment authenticator
SourceHut account takeover via build logs (XSS in ansi2html.py)
3 sources 12 min
VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities
3 min
Cross-Site Scripting (XSS) Cheat Sheet
15 min
When Business Email Compromise Starts Rewriting Reality
in the wild 5 min
CVE-2026-91928: Apache Sling XSS: Sanitizer bypass, uncontrolled resource consumption and failure pf protection mechanisms
Adobe Patches Critical Flaws in Connect, AEM Forms
2 min
OpenPLC Runtime v3
3 min
New Cache Key Injection Attack Lets Hackers Bypass Access Controls and Poison Nginx Caches
2 sources 3 min
Click2Shell: The RCE WordPress 7.1.1 Just Patched
4 min1
Grafana security advisory (AV26-936)
WordPress 7.1.1 Maintenance and Security Release
5 min
WordPress 7.1.1 Maintenance and Security Release
4 min
Jenkins Patches 20 Plugin Flaws Leading to RCE, XSS and Credential Theft
4 min
Drupal core - Moderately critical - Third-party libraries - SA-CORE-2026-013
Cisco Identity Services Engine Cross-Site Scripting Vulnerability
OpenAI Agent Swarm Linked to 3,022 Malicious RubyGems Packages in GemStuffer Campaign
in the wild 5 min2
Siemens Teamcenter
4 min
Telegram Desktop XSS Vulnerability Lets Attackers Steal Entire Chat Histories
3 min
Telegram Desktop Flaw Lets Attackers Steal Chat Messages Through Poisoned HTML Exports
3 min
Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports
5 min1