packages_apps_settings_AOSP10_r33_CVE-2021-0481

Este repositorio no tiene un README...

CVE-2026-1208

CVE-2026-1208: Falsificación de Solicitudes entre Sitios en Friendly Functions for Welcart Palabras clave: CVE-2026-1208, vulnerabilidad en Friendly Functions for Welcart, CSRF, Falsificación de Solicitudes entre Sitios, seguridad de WordPress, vulnerabilidad de plugin de WordPress, CWE-352,...

CVE-2025-31033

⚠️ CVE-2025-31033 - CSRF en el plugin Buddypress Humanity de WordPress Exploit – C...

CVE-2025-55817

漏洞类型 跨站脚本（XSS） 受影响组件 Chillicream 的 Nitro GraphQL 连接设置中包含3个不同的输入位置，容易遭受跨站脚本攻击（XSS）。易受攻击的参数：SDL Schema Endpoint、Subscription Endpoint、SSE Subscription Endpoint 攻击类型 远程 影响-信息泄露 是 攻击向量 3个输入字段容易受到XSS负载的攻击： 供应商已确认 是 发现者 Brian Lowe - KirkpatrickPrice - 2025年6月23日 参考 https://chillicream.com 产品供应商...

Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS

CVE-2021-46074 漏洞标题: Vehicle Service Management System - 'Settings' 存储型跨站脚本 XSS 漏洞作者: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 中危 参考资料: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46074...

CVE-2019-0678

漏洞 Microsoft Edge 权限提升漏洞 漏洞描述 该漏洞允许攻击者在未经许可的情况下在每个主机上执行JavaScript代码，攻击者还可以窃取本地系统文件，这还会导致更改 Microsoft Edge 中的内部开发者设置。 CVE-ID CVE-2019-0678 供应商 Microsoft 产品 Microsoft Edge 披露时间线 1. 2018年11月28日向供应商报告 2. 2019年12月3日协调公开发布安全公告 致谢 Nikhil Mittal...

firefox: thunderbird: Sandbox escape in the Remote Settings Client component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Remote Settings Client component...

firefox: thunderbird: Sandbox escape in the Remote Settings Client component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Remote Settings Client component...

firefox: thunderbird: Sandbox escape in the Remote Settings Client component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the Remote Settings Client component...

CVE-2026-105195

The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site...

EUVD-2026-94767

The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site...

CVE-2026-105195 Booking Calendar 10.15 - 11.8.2 - Editor+ Arbitrary Option Disclosure

The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site...

CVE-2026-94581

An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions. An attacker with...

CVE-2026-94581

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 are vulnerable to an OS command injection vulnerability in the REST API management interface. An authenticated, high-privileged remote attacker who possesses administrative privileges to configure SSH known host settings can sup...

EUVD-2026-94741

An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions. An attacker with...

CVE-2026-94581

An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions. An attacker with...

CVE-2026-94581

An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions. An attacker with...

PT-2026-107799

A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control RBAC checks under specific environmental conditions. Successful exploitation lowers the system authorization mode for t...

PT-2026-107818

An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions. An attacker with...

PT-2026-108322

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description HTTP/2 servers may crash due to concurrent modification of the HPACK encoder. This occurs when the server modifies the encoder from two goroutines without...