PULSEUnderground Intel

EN VIVO21señales / 24h

FEED

ransomcloak reclama a ********rta.ch · CH · Not Foundransomcloak reclama a dac********er.de · DE · Not Foundransomn0n reclama a Telecom Egypt · EG · Technologyransomn0n reclama a All Business Technologies (Fox Hill bookkeeping and tax practice) · Professional Servicesransomn0n reclama a SMIC US Company (Sunnyvale, CA — US arm of Semiconductor Manufacturing International Corpo... · US · Manufacturingransomqilin reclama a Llano Independent School District · US · Educationransomiah6477 reclama a mckenneys · US · Professional Servicesransomqilin reclama a BRUTRA Logistek · NL · Transportationransomqilin reclama a Pengurusan Aset Air Berhad · MY · Energy & Utilitiesransomqilin reclama a Pergande · DE · Not Foundransomqilin reclama a Mastelli S.r.l. · IT · Manufacturingransomn0n reclama a Company #91 · US · Not Foundransomhelix reclama a Southwire · US · Manufacturingransomemperador reclama a Luzco Ilumination · Energy & Utilitiesransomcloak reclama a ********rta.ch · CH · Not Foundransomcloak reclama a dac********er.de · DE · Not Foundransomn0n reclama a Telecom Egypt · EG · Technologyransomn0n reclama a All Business Technologies (Fox Hill bookkeeping and tax practice) · Professional Servicesransomn0n reclama a SMIC US Company (Sunnyvale, CA — US arm of Semiconductor Manufacturing International Corpo... · US · Manufacturingransomqilin reclama a Llano Independent School District · US · Educationransomiah6477 reclama a mckenneys · US · Professional Servicesransomqilin reclama a BRUTRA Logistek · NL · Transportationransomqilin reclama a Pengurusan Aset Air Berhad · MY · Energy & Utilitiesransomqilin reclama a Pergande · DE · Not Foundransomqilin reclama a Mastelli S.r.l. · IT · Manufacturingransomn0n reclama a Company #91 · US · Not Foundransomhelix reclama a Southwire · US · Manufacturingransomemperador reclama a Luzco Ilumination · Energy & Utilities

← Todos los CVEs

CVE Watch18 oct 2026

CVE-2026-110897

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for B

CVSS

7.1

Alto

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 18 oct 2026 · Última mod.: 18 oct 2026 · CWE-79

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder allows Stored XSS.This issue affects PowerPack Lite for Beaver Builder: from n/a through 1.3.1.

Referencias oficiales

patchstack.comhttps://patchstack.com/database/wordpress/plugin/powerpack-addon-for-beaver-builder/vulnerability/wordpress-powerpack-lite-for-beaver-builder-plugin-1-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1119874.3 MED

———A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function read_metadata_from_safetensors of the file modules/sd_models.py of the component Extra-Networks Card Builder. Such manipulation of the argument __metadata__.sshs_model_hash leads to cross site scripting. The attack can be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.11h CVE-2026-1119844.3 MED

———A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This affects the function create_item_html of the file modules/ui_extra_networks.py of the component Card Builder. The manipulation of the argument filename leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.13h CVE-2026-1103827.1 ALT

———Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Stored XSS.This issue affects Simply Schedule Appointments: from n/a through 1.6.12.35.14h CVE-2026-1098957.1 ALT

———Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics Booktics booktics allows DOM-Based XSS.This issue affects Booktics: from n/a through 1.0.29.13h CVE-2026-1084857.1 ALT

———Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill eStore estore allows Reflected XSS.This issue affects eStore: from n/a through 1.6.13.14h CVE-2026-1119424.3 MED

———A weakness has been identified in hrisikeshpal Blood_Bank_Management_System 1.0.0. Impacted is an unknown function of the file /abs.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.18h