Astra Linux – Vulnerability in Chromium

A out-of-bounds memory read in SurfaceCapture using Google Chrome before version 150.0.7871.47 allowed a remote attacker to perform an out-of-bounds memory read through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of after-free in HID in Google Chrome before version 148.0.7778.168 allowed a remote attacker who convinced a user to perform certain UI gestures to potentially execute a sandbox escape through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

A vulnerability was identified in Google Chrome before version 149.0.7827.53, which allowed a remote attacker to perform an out-of-bounds memory read through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The out-of-bounds write-in ANGLE feature in Google Chrome, as of version 148.0.7778.216, allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 Exploit Configuration for realme RMX3888 D...

Exploit for CVE-2026-64600

cve-id Donate Support the maintenance of this project wit...

Exploit for Deserialization of Untrusted Data in Metabase

No d...

EUVD-2026-47927

The Lpagery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.5.7. This is due to insufficient input sanitization and output escaping in the lpageryaddfiltertexttemplatepost function, which is hooked to adminfooter and echoes the...

openjdk: Improve Nashorn index handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There is an integer overflow in TypedArray.prototype.set which can cause a DoS...

Exploit for Use After Free in Linux Linux_Kernel

Aristotle ADB Enable A minimal Android app that turns on AD...

openjdk: Enhance XBM image support (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The regex defined in XbmImageDecoder matchRegex is vulnerable to a DoS attack when the input contains a long string without a closing character; due to excessive backtracking...

Exploit for External Control of File Name or Path in Microsoft

CVE-2024-43451 — Windows NTLM Hash Disclosure Spoofing Vulnera...

CVE-2026-16653 boazsegev facil.io Public Folder http.c http_sendfile2 path traversal

A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function httpsendfile2 of the file lib/facil/http/http.c of the component Public Folder Handler. Performing a manipulation results in path traversal. Remote exploitation of the attack is possible. The exploit...

CVE-2026-16653

A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function httpsendfile2 of the file lib/facil/http/http.c of the component Public Folder Handler. Performing a manipulation results in path traversal. Remote exploitation of the attack is possible. The exploit...

EUVD-2026-47863

A vulnerability was detected in publint up to 0.1.4. This impacts the function childprocess.exec of the file src/node/pack.js of the component package-manager Command Handler. The manipulation results in os command injection. Attacking locally is a requirement. The exploit is now public and may b...

CVE-2026-16632

A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocketonprotocolerror in the library lib/facil/http/parsers/websocketparser.h of the component WebSocket Frame Parser. This manipulation of the argument onmessage causes improper input validation. The attack can ...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-30671)

Chrome is a web browser developed by Google. Google Chrome has a security vulnerability, which stems from an issue with the CameraCapture module that allows for reuse after release. Attackers can exploit this vulnerability to achieve sandbox escape through specially crafted HTML pages...

PT-2026-64090

A flaw has been found in LMCache up to 0.4.6. This affects the function hex hash to int16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high lev...

PT-2026-64189

Name of the Vulnerable Software and Affected Versions CodeAstro Online Classroom version 1.0 Description Remote SQL injection is possible due to improper handling of the aid argument within the '/OnlineClassroom/loginlinkadmin.php' endpoint. SQL injection is a technique where an attacker inserts...

PT-2026-63996

A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...