70583 matches found
CVE-2026-69976
A Use after free vulnerability in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. The vulnerability results in a high impact on confidentiality, integrity, and availability. No specific technical details regarding the root cause component or exploit links...
CVE-2026-108458
A Use after free vulnerability exists in the Remote Desktop Client . This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is rated with a HIGH base severity score of 8.8. Remediation is available via an OFFICIAL_FIX provided by Microso...
CVE-2026-110239 Rapyd Admin before 9.20.0 Stored XSS via rich-text Component
Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes...
CVE-2026-110239
The Rapyd Admin software versions prior to 9.20.0 is vulnerable to a stored cross-site scripting (XSS) flaw within the x-rpd::rich-text Blade component. The root cause is the component's failure to sanitize bound model values, which are instead output as raw HTML. An authenticated user can exploi...
CVE-2026-110239 Rapyd Admin before 9.20.0 Stored XSS via rich-text Component
Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes...
AuroraStore
Aurora Store Aurora Store enables you to search and download apps from the official Google Play store. You can check app descriptions, screenshots, updates, reviews, and download the APK directly from Google Play to your device. To use Aurora Store, log in using Google Play account, when you firs...
CVE-2026-85747 Distribution: Client `manifests.Get()` does not verify returned content against requested digest
Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.manifests.Get reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body against the requested digest, allowing a...
CVE-2026-85747
Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.manifests.Get reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body against the requested digest, allowing a...
CVE-2026-85747 Distribution: Client `manifests.Get()` does not verify returned content against requested digest
Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.manifests.Get reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body against the requested digest, allowing a...
CVE-2026-85747
Distribution , a toolkit for handling container content, is vulnerable in versions prior to 3.1.2 . The registry/client.(*manifests).Get() function fails to verify returned content against a requested digest during digest-pinned requests, allowing a malicious or intercepted registry response to s...
CVE-2024-48910-POC
CVE-2024-48910 Proof of Concept This is a proof of concept for CVE-2024-48910. This is a vulnerability that was present in DOMPurify, an XSS sanitizer for HTML, SVG, and MathML. This version of DOMPurify is vulnerable to prototype pollution, where an atatcker can inject properties into any JS...
DEBIAN-CVE-2026-88833
A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...
CVE-2026-88833
A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...
2026-10 .NET 9.0.21 Security Update for x86 Client (KB5130035)
2026-10 .NET 9.0.21 Security Update for x86 Client KB5130035...
2026-10 .NET 10.0.13 Security Update for ARM64 Client (KB5130036)
2026-10 .NET 10.0.13 Security Update for ARM64 Client KB5130036...
2026-10 .NET 9.0.21 Security Update for ARM64 Client (KB5130035)
2026-10 .NET 9.0.21 Security Update for ARM64 Client KB5130035...
2026-10 .NET 10.0.13 Security Update for x64 Client (KB5130036)
2026-10 .NET 10.0.13 Security Update for x64 Client KB5130036...
2026-10 .NET 8.0.32 Security Update for ARM64 Client (KB5130034)
2026-10 .NET 8.0.32 Security Update for ARM64 Client KB5130034...