38111 matches found
CVE-2026-76020
Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping
A flaw was found in html/template. A trusted template author could craft a script tag with an empty or whitespace-only 'type' attribute. This vulnerability causes the template engine to incorrectly escape data passed into the script block, potentially leading to cross-site scripting XSS. An...
GHSA-864F-RCV7-6RH4
creationtimestamp| type| source ---|---|--- 2026-08-20 16:00:51+00:00| seen| https://thehackernews.com/2026/08/isolated-vm-flaw-lets-sandboxed.html 2026-08-20 16:34:42+00:00| seen| https://bsky.app/profile/endorlabs.bsky.social/post/3mtjogb2gjk23 2026-08-21 01:00:35+00:00| seen|...
EUVD-2026-63265
n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain an information disclosure vulnerability in the GraphQL node. When a GraphQL request fails at the connection level, the node re-throws the underlying HTTP client error unchanged instead of wrapping it in n8n's standard error type. That error...
CVE-2026-77076
n8n versions before 1.123.69, 2.33.4, and 2.34.1 have a GraphQL node flaw where connection-level errors are re-thrown with raw HTTP client error data containing decrypted credential secrets, persisted in execution run data readable by any authenticated user. CVSS 7.1 HIGH. Patch versions are 1.12...
WordPress WP Travel Engine plugin < 6.8.2 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver and Amount Verification vulnerability
Unauthenticated Payment Bypass via Missing PayPal IPN Receiver and Amount Verification vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin WP Travel Engine versions 6.8.2...
OESA-2026-3425 perl security update
Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects. Security Fixes: Perl versions through 5.45.1 have...
XSRFProbe v3.0.0
XSRFProbe The Prime Cross Site Request Forgery Audit & Exploitation Toolkit. -blue.svg About XSRFProbe is an advanced Cross Site Request Forgery CSRF/XSRF Audit and Exploitation Toolkit. Equipped with a powerful crawling engine and numerous systematic checks, it is able to detect most cases of CS...
drakvuf-sandbox v0.21.0
DRAKVUF Sandbox !WARNING Here be dragons 🐉. Maintaining your own sandbox is a difficult task and this project uses technology that is not user-friendly. Be prepared to brush up on your debugging skills as bugs may be reproducible only on your configuration. On the other hand, it's not purely an R...
EUVD-2026-63143
Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
EUVD-2026-62937
In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...
PT-2026-79128
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.173 Description A race condition in the V8 engine allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to open a specially crafted HTML page. A race condition...
Linux Distros Unpatched Vulnerability : CVE-2026-76887
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76887 Note that Nessus relies on the presence o...
SPIP X-Spip-Filtre Unauthenticated RCE
This module exploits a PHP function-call injection in SPIP's template engine. The analyseresultatskel function extracts patterns from the rendered page body and calls the listed functions as template filters. A newline character is injected into a GET parameter value, which places a header call o...
quickjs-ng: Multiple Vulnerabilities
Background quickjs-ng is a small and embeddable JavaScript engine. It aims to support the latest ECMAScript specification. It is a fork of QuickJS. Description Multiple vulnerabilities have been discovered in quickjs-ng. Please review the CVE identifiers referenced below for details. Impact Pleas...
CVE-2026-76887
Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
DEBIAN-CVE-2026-76887
Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
AZL-96794 CVE-2026-76887 affecting package wireshark 4.4.7-2
Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
