CVE-2026-121254

An information leak flaw was found in the Select component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562225118...

CVE-2026-121254

Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

WordPress Select All Categories and Taxonomies <1.3.2 - Cross-Site Scripting

WordPress Select All Categories and Taxonomies plugin before 1.3.2 contains a cross-site scripting vulnerability. The settings page of the plugin does not properly sanitize the tab parameter before outputting it back. An attacker can inject arbitrary script in the browser of an unsuspecting user ...

CVE-2026-121254

Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121254

Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121254

An information leak vulnerability exists in the Select component of the Google Chrome browser in versions prior to 157.0.8103.38 . A remote attacker can exploit this flaw by hosting a crafted HTML page to obtain sensitive information from the user's system. This issue is categorized as a Medium s...

EUVD-2026-116481

Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-115955

SurrealDB before 3.3.0 contains an unbounded recursion vulnerability that allows authenticated users to abort the surreald process by triggering stack overflow on deeply nested values. Attackers can repeatedly run UPDATE statements wrapping a stored array in itself, then SELECT or EXPORT it,...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: tools/power/x86/intel-speed-select: Harden daemon pidfile open To avoid symlink-based pidfile clobbering, open the pidfile with ONOFOLLOW and validate it using fstat before locking or writing to it. Currently, the daemon uses a...

Google Chrome Edge Select Component Forgery

The vulnerability in the Select component of Google Chrome and Microsoft Edge is related to improper handling of user interface information. Exploitation of this vulnerability enables a remote attacker to forge the contents of the address bar by using a specially crafted HTML page...

CVE-2026-29187_SqlInjectionVulnerabilityOpenEMR7.0.4

CVE-2026-29187 - SQL Injection Vulnerability in new search popup Weakness CWE-89 Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not...

CVE-2026-65321-pyathena

CVE-2026-65321: SQL Injection in PyAthena via Backslash Quote-Escaping for Non-SELECT Statements Severity: Critical, CVSS v4.0 9.3 / CVSS v3.1 9.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1:...

CVE-2022-28346

CVE-2022-28346 Django QuerySet.annotate, aggregate, extra SQL Injection Environment Initialization 1.python manage.py makemigrations 2.python manage.py migrate 3.访问http://x.x.x.x:8000/ 插入初始化数据 Vulnerability Reproduction 访问http://x.x.x.x:8000/demo POC: http://x.x.x.x:8000/demo?field=demo.name" FRO...

CVE-2026-32710

CVE-2026-32710 Heap buffer overflow in MariaDBJSONSCHEMAVALID → persistent privilege escalation → UDF RCE | ---|--- Affected| MariaDB 11.4.x confirmed on 11.4.9 Bug| OOB write in jsongetnormalizedstring — strncpy into 128-byte DYNAMICSTRING with no bounds check Impact| SELECT-only user → ALL...

sqlite-xfer-auth

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-xfer-auth Write-up: https://abraxaslabs.tech/research/sqlite-xfer-auth sqlite-xfer-auth Class: Privilege leftover Reach: Local SQLite 3.53.4 b09c88c, SOURCEID 2026-07-24 19:02:57...

CVE-2026-15748

CVE-2026-15748 — Forminator Forms Unauthenticated Arbitrary File Upload → RCE CVSS 9.8 Critical · Affected: Forminator = 1.56.1 · Patched: 1.56.2 Researcher: daroo Wordfence Bug Bounty, $2,048 · 600k active installs Writeup:...

CVE_2018_16763_Proof_of_Concept

CVE-2018-16763 Proof-of-Concept A Proof-of-Concept PoC exploit for CVE-2018-16763 Fuel CMS - Preauthenticated Remote Code Execution. Description This Python 3 program serves as a PoC for the CVE-2018-16763 vulnerability in the Fuel CMS content management system. Specifically, the vulnerability...

BUI-select-xss

BUI-select-xss cve-2018-8108 During a security test, this issue was discovered by chance. BUI is a front-end framework used by many enterprises to build their own front-end applications. Typically, we prevent XSS by treating all user input as untrusted, escaping it during output, and then passing...

CLEANSTART-2024-XP77487 When styling and rendering an oversized `<select>` element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface

Security vulnerability affects the firefox package. When styling and rendering an oversized element, Firefox did not apply correct clipping which allowed an attacker to paint over the user interface...

Linux Distros Unpatched Vulnerability : CVE-2026-116797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid Pro input renderers copy the cells.renderer.attributes and...