XSS Archives • Daily CyberSecurity

Critical Roundcube Webmail Security Updates Fix Severe Flaws

Roundcube Webmail security updates Roundcube Webmail Security Roundcube 1.6.14 Update

Critical Roundcube Webmail Security Updates Fix Severe Flaws

Ddos May 28, 2026

The Roundcube development team has released urgent Roundcube Webmail security updates. These software patches address versions 1.6.16...

Important Security Flaw Patched in Apache ECharts Library Apache ECharts XSS vulnerability

Important Security Flaw Patched in Apache ECharts Library

Ddos May 26, 2026

Apache ECharts is a free, powerful JavaScript charting and visualization library that developers use globally. Recently, security...

GitLab Critical Patch: High-Severity XSS and Unauthenticated DoS Flaws Hit Self-Managed Instances GitLab Security Update May 2026 GitLab XSS and DoS Vulnerabilities GitLab Security Session Hijacking GitLab Security Update, CI/CD Vulnerability GitLab DoS, Security Update bypassing SAML - CVE-2024-8312 and CVE-2024-6826

GitLab Security Update May 2026 GitLab XSS and DoS Vulnerabilities GitLab Security Session Hijacking GitLab Security Update, CI/CD Vulnerability GitLab DoS, Security Update bypassing SAML - CVE-2024-8312 and CVE-2024-6826

GitLab Critical Patch: High-Severity XSS and Unauthenticated DoS Flaws Hit Self-Managed Instances

Ddos May 14, 2026

In a major move to secure its DevOps platform, GitLab has released important security versions for both...

Critical-Severity XSS Flaws Uncovered in Siemens SIMATIC S7 Web Servers Siemens SIMATIC S7 Vulnerability Industrial PLC XSS CVE-2024-44102 - Siemens TeleControl Server Basic

Siemens SIMATIC S7 Vulnerability Industrial PLC XSS CVE-2024-44102 - Siemens TeleControl Server Basic

Critical-Severity XSS Flaws Uncovered in Siemens SIMATIC S7 Web Servers

Ddos May 13, 2026

Siemens ProductCERT issued an urgent security advisory regarding multiple Cross-Site Scripting (XSS) vulnerabilities found within the web...

Critical PrestaShop Flaw Allows Hijacking via “Contact Us” Form PrestaShop XSS Vulnerability CVE-2026-44212

Critical PrestaShop Flaw Allows Hijacking via “Contact Us” Form

Ddos May 12, 2026

PrestaShop, the global open-source e-commerce powerhouse known for its highly customizable PHP architecture and responsive design, has...

Zabbix Flaws Allow Monitored Hosts to Hijack Admin Dashboards Zabbix XSS Vulnerabilities CVE-2026-23926 zabbix - CVE-2024-22116 Zabbix SQL Injection CVE-2026-23921

Zabbix XSS Vulnerabilities CVE-2026-23926 zabbix - CVE-2024-22116 Zabbix SQL Injection CVE-2026-23921

Zabbix Flaws Allow Monitored Hosts to Hijack Admin Dashboards

Ddos May 8, 2026

Zabbix, the ubiquitous open-source monitoring solution used by enterprises to track the health of vast IT infrastructures,...

Triple Critical Threat: Apache Wicket Patch Fixes Path Traversal, Session Hijacking, and Resource Bypass CVE-2024-36522 Apache Wicket Critical Vulnerabilities CVE-2026-43975

CVE-2024-36522 Apache Wicket Critical Vulnerabilities CVE-2026-43975

Triple Critical Threat: Apache Wicket Patch Fixes Path Traversal, Session Hijacking, and Resource Bypass

Ddos May 7, 2026

The Apache Wicket project, a popular open-source Java framework prized for its clean separation of HTML markup...

High-Severity RCE and XSS Flaws Found in Popular CI/CD Jenkins Plugins Jenkins Plugin RCE CI/CD Security Advisory Jenkins Vulnerability CVE-2026-33001 Jenkins CLI DoS, Coverage Plugin XSS Jenkins SAML Hijacking, Plaintext Secrets CVE-2023-43495 - Jenkins Vulnerability

Jenkins Plugin RCE CI/CD Security Advisory Jenkins Vulnerability CVE-2026-33001 Jenkins CLI DoS, Coverage Plugin XSS Jenkins SAML Hijacking, Plaintext Secrets CVE-2023-43495 - Jenkins Vulnerability

High-Severity RCE and XSS Flaws Found in Popular CI/CD Jenkins Plugins

Ddos April 30, 2026

The Jenkins project has released a security advisory, addressing several vulnerabilities across its plugin ecosystem. The fixes...

Triple Threat: Apache ActiveMQ Vulnerabilities Expose Enterprises to RCE and XSS ActiveMQ RCE Jolokia Spring Vulnerability ActiveMQ MQTT Vulnerability CVE-2025-66168 Apache Artemis Vulnerability CVE-2026-27446

ActiveMQ RCE Jolokia Spring Vulnerability ActiveMQ MQTT Vulnerability CVE-2025-66168 Apache Artemis Vulnerability CVE-2026-27446

Triple Threat: Apache ActiveMQ Vulnerabilities Expose Enterprises to RCE and XSS

Ddos April 24, 2026

Apache ActiveMQ, the world’s most popular open-source message broker, is currently facing a series of “Important” security...

High-Severity RCE and XSS Vulnerabilities Patched in Apache Storm 2.8.6 Apache Storm RCE Deserialization Vulnerability

High-Severity RCE and XSS Vulnerabilities Patched in Apache Storm 2.8.6

Ddos April 13, 2026

Apache Storm, the distributed realtime computation system known for processing unbounded streams of data, has released a...

Critical 9.6 CVSS OIDC Flaws in OpenBao Turn “Direct Login” Into a Phishing Trap OpenBao Vulnerability OIDC Session Hijacking

Critical 9.6 CVSS OIDC Flaws in OpenBao Turn “Direct Login” Into a Phishing Trap

Ddos March 30, 2026

The OpenBao community, the open-source initiative dedicated to managing and distributing sensitive data like secrets and certificates,...

Critical 9.3 CVSS Auth Bypass and XSS Flaws Hit MantisBT MantisBT Vulnerability Authentication Bypass

Critical 9.3 CVSS Auth Bypass and XSS Flaws Hit MantisBT

Ddos March 27, 2026

Security researchers have identified a trio of significant vulnerabilities within MantisBT, the popular open-source issue tracking system...

Public Flaws in Cisco IOx Allow Unauthenticated Log Injection and Admin XSS Cisco IOx Log Manipulation Cisco Small Business - CVE-2024-20393 and CVE-2024-20470

Cisco IOx Log Manipulation Cisco Small Business - CVE-2024-20393 and CVE-2024-20470

Public Flaws in Cisco IOx Allow Unauthenticated Log Injection and Admin XSS

Ddos March 26, 2026

Cisco has issued security advisories regarding two vulnerabilities in its Cisco IOx application hosting environment for Cisco...

Roundcube Webmail Hits Critical Update: New Security Fixes Target Hidden Vulnerabilities Roundcube Webmail security updates Roundcube Webmail Security Roundcube 1.6.14 Update

Roundcube Webmail Hits Critical Update: New Security Fixes Target Hidden Vulnerabilities

Ddos March 23, 2026

Roundcube Webmail has released a high-priority security update, version 1.6.14, aimed at patching several significant vulnerabilities that...

Invisible Ink: Critical 9.6 CVSS jsPDF Flaw Turns Generated Documents into XSS Traps

Ddos March 19, 2026

A critical-severity vulnerability has been identified in jsPDF, the popular JavaScript library used by developers worldwide to...

Exploited in the Wild: CISA Warns of Active Attacks on Microsoft SharePoint and Zimbra CISA KEV Catalog SharePoint RCE CISA, Known Exploited Vulnerabilities CVE-2023-33010

CISA KEV Catalog SharePoint RCE CISA, Known Exploited Vulnerabilities CVE-2023-33010

Exploited in the Wild: CISA Warns of Active Attacks on Microsoft SharePoint and Zimbra

Ddos March 19, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has officially expanded its Known Exploited Vulnerabilities (KEV) Catalog, adding...

Industrial Alert: Critical Stored XSS Vulnerability Discovered in Siemens SIMATIC S7-1500 Siemens SIMATIC Vulnerability CVE-2025-40943 CVE-2024-47901 - Siemens InterMesh system CVE-2025-40804 Siemens SIVaaS

Siemens SIMATIC Vulnerability CVE-2025-40943 CVE-2024-47901 - Siemens InterMesh system CVE-2025-40804 Siemens SIVaaS

Industrial Alert: Critical Stored XSS Vulnerability Discovered in Siemens SIMATIC S7-1500

Ddos March 11, 2026

A high-severity security flaw has been uncovered in the Siemens SIMATIC S7-1500 CPU family, a cornerstone of...

Critical 9.3 CVSS Flaw in SiYuan Lets Hackers Steal Private Notes via SVG Injection SiYuan XSS Vulnerability CVE-2026-29183

Critical 9.3 CVSS Flaw in SiYuan Lets Hackers Steal Private Notes via SVG Injection

Ddos March 9, 2026

Security researchers have disclosed a high-severity vulnerability in SiYuan, the popular privacy-first personal knowledge management system. The...

1-Click to Compromise: Critical 9.3 CVSS Flaw in ZITADEL Exposes Accounts to Full Takeover ZITADEL Vulnerability CVE-2026-29191 CVE-2025-27507 ZITADEL SSRF, Login UI Hijack

ZITADEL Vulnerability CVE-2026-29191 CVE-2025-27507 ZITADEL SSRF, Login UI Hijack

1-Click to Compromise: Critical 9.3 CVSS Flaw in ZITADEL Exposes Accounts to Full Takeover

Ddos March 9, 2026

Security researchers have disclosed a high-severity vulnerability in ZITADEL, the popular open-source identity and access management (IAM)...

High-Severity XSS Flaw in Angular i18n Turns Language Files into Backdoors Angular hostname hijacking vulnerability Angular SSRF Origin Hijacking Angular XSS Vulnerability CVE-2026-32635 Angular i18n XSS CVE-2026-27970 Angular SSR SSRF CVE-2026-27739 Angular Vulnerability CVE-2026-22610 CVE-2025-59052 Angular security Angular XSS Bypass, SVG Injection

Angular hostname hijacking vulnerability Angular SSRF Origin Hijacking Angular XSS Vulnerability CVE-2026-32635 Angular i18n XSS CVE-2026-27970 Angular SSR SSRF CVE-2026-27739 Angular Vulnerability CVE-2026-22610 CVE-2025-59052 Angular security Angular XSS Bypass, SVG Injection

High-Severity XSS Flaw in Angular i18n Turns Language Files into Backdoors

Ddos March 3, 2026

A newly security flaw was found in the widely used Angular web building platform. Identified as CVE-2026-27970...