16 matches found
CVE-2026-26156
CVE-2026-26156 is a Windows Hyper-V heap-based buffer overflow that enables local code execution. The connected sources corroborate the vulnerability in Windows Hyper-V and indicate it has been fixed by Microsoft in security updates (e.g., KBs and advisories referenced in the sources). The Red Ha...
CVE-2026-26156 Windows Hyper-V Remote Code Execution Vulnerability
...
CVE-2026-26156 Windows Hyper-V Remote Code Execution Vulnerability
...
CVE-2026-26156
creationtimestamp| type| source ---|---|--- 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 18:36:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116404503957849488 2026-04-14 20:05:11+00:00| seen|...
CVE-2022-26156
An issue was discovered in the web application in Cherwell Service Management CSM 10.2.3. Injection of a malicious payload within the RelayState= parameter of the HTTP request body results in the hijacking of the form action. Form-action hijacking vulnerabilities arise when an application places...
CVE-2025-26156
creationtimestamp| type| source ---|---|--- 2025-02-14 17:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5peim7o42a 2025-02-14 18:45:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud7pi242p 2025-02-14 19:17:54+00:00|...
CVE-2024-26156
All versions of ETIC Telecom Remote Access Server RAS prior to 4.5.0 are vulnerable to reflected cross site scripting XSS attacks in the method parameter. The ETIC RAS web server uses dynamic pages that gets their input from the client side and reflects the input in its response to the client...
CVE-2024-26156
CVE-2024-26156 affects all versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0. The vulnerability is a reflected cross-site scripting (XSS) in the HTTP method parameter, caused by dynamic pages that reflect client-provided input. Public details consistently describe the impact as a...
Security Bulletin: IBM Event Streams is affected by a vulnerability in Node.js ChromeDriver module (CVE-2023-26156)
Summary This security vulnerability affects a required node.js module within IBM Event Streams UI component. Vulnerability Details CVEID: CVE-2023-26156 DESCRIPTION: Node.js ChromeDriver module could allow a remote attacker to execute arbitrary commands on the system, caused by a command injectio...
@amjs/vue-tools (>=2.0.5 <=2.0.6), @axe-core/cli (>=4.3.3 <=4.7.4-alpha.409) +68 more potentially affected by CVE-2023-26156 via chromedriver (>=100.0.0 <=119.0.0)
chromedriver NPM version =100.0.0, =2.0.5, =4.3.3, =0.1.0, =3.5.0-beta.1, =0.0.91, =0.1.1-alpha5, =7.4.0, =1.16.0, =1.0.1, =4.0.0, =6.0.0, =6.0.22, =0.21.1, =1.0.0-feat.12 and more Source cves: CVE-2023-26156 Source advisory: OSV:GHSA-HM92-VGMW-QFMX...
CVE-2023-26156
Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...
CVE-2022-26156
creationtimestamp| type| source ---|---|--- 2022-02-28 18:23:23+00:00| seen| https://t.me/cibsecurity/38178...
CVE-2022-26156
An issue was discovered in the web application in Cherwell Service Management CSM 10.2.3. Injection of a malicious payload within the RelayState= parameter of the HTTP request body results in the hijacking of the form action. Form-action hijacking vulnerabilities arise when an application places...
CVE-2022-26156
CVE-2022-26156 affects Cherwell Service Management (CSM) web application, version 10.2.3. The issue is an injection of a malicious payload into the RelayState= parameter of the HTTP request body, causing form-action hijacking by altering the form submission URL to an attacker-controlled endpoint....