Chromium: CVE-2026-13029 Use after free in Web Authentication

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-13029

Use after free in Web Authentication in Google Chrome prior to 149.0.7827.197 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: High...

CVE-2026-13029

CVE-2026-13029: Use-after-free in Web Authentication for Google Chrome, fixed in or after 149.0.7827.197. Affected component: Web Authentication flow; vulnerability arises when a user is convinced to install a malicious Chrome Extension, potentially enabling heap corruption via a crafted extensio...

CVE-2025-13029

creationtimestamp| type| source ---|---|--- 2025-12-31 06:37:22+00:00| seen| https://bsky.app/profile/potato.software/post/3mbbaupnewh24 2026-01-02 15:22:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbh75gxx7u2p 2026-01-02 18:50:33+00:00| seen|...

CVE-2025-13029

The Knowband Mobile App Builder WordPress plugin before 3.0.0 does not have authorisation when deleting users via its REST API, allowing unauthenticated attackers to delete arbitrary users...

CVE-2024-13029

A vulnerability, which was classified as problematic, was found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/book of the component Edit Book Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack...

CVE-2019-13029

Multiple stored Cross-site scripting XSS issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser...

CVE-2019-13029

creationtimestamp| type| source ---|---|--- 2025-03-19 20:18:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8145...

Linux Distros Unpatched Vulnerability : CVE-2017-13029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:printccpconfigoptions. CVE-2017-13029 Note that Nessus relies on the presence of th...

CVE-2024-13029

A vulnerability, which was classified as problematic, was found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/book of the component Edit Book Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack...

CVE-2024-13029

creationtimestamp| type| source ---|---|--- 2024-12-29 23:36:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113738738400003723 2024-12-30 01:45:02+00:00| seen| https://t.me/cvedetector/13909...

CVE-2024-13029 Antabot White-Jotter Edit Book book server-side request forgery

A vulnerability, which was classified as problematic, was found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/book of the component Edit Book Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack...

CVE-2024-13029

CVE-2024-13029 affects Antabot White-Jotter up to 0.2.2. The issue occurs in the Edit Book Handler’s /admin/content/book path, where an unknown function allows server-side request forgery (SSRF) and can be triggered remotely. Public exploit information exists. Connected sources confirm the vulner...

CVE-2024-13029 Antabot White-Jotter Edit Book book server-side request forgery

A vulnerability, which was classified as problematic, was found in Antabot White-Jotter up to 0.2.2. Affected is an unknown function of the file /admin/content/book of the component Edit Book Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack...

CVE-2020-13029

...

CVE-2020-13029

CVE-2020-13029 is rejected and does not represent an active vulnerability entry.

REDCap 9.1.2 - Cross-Site Scripting

REDCap 9.1.2 - Cross-Site Scripting Exploit Title: REDCap - Details: Since it is an onkeypress event, it is triggered whenever the user touch any key and since the XSS payload is stored in the project name it appears in several pages. - Privileges: It requires admin privileges to store it. -...

REDCap Cross Site Scripting

Exploit Title: REDCap - Details: Since it is an onkeypress event, it is triggered whenever the user touch any key and since the XSS payload is stored in the project name it appears in several pages. - Privileges: It requires admin privileges to store it. - Location example:...

CVE-2019-13029

CVE-2019-13029 describes multiple stored XSS flaws in REDCap’s admin panel and survey system, affecting REDCap 8 prior to 8.10.20 and REDCap 9 prior to 9.1.2. The vulnerability allows an attacker with admin privileges to inject arbitrary HTML/JavaScript into a user’s browser, with the project nam...

CVE-2017-13029

The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:printccpconfigoptions...