25 matches found
Trinity-Audio-CVE-Report2
Trinity-Audio-CVE-Report 2 Disclosure for CVE-2025-9886 and CVE-2025-9952. CVE-2025-9886 and CVE-2025-9952 - Vulnerability in Trinity Audio This repository discloses a vulnerability discovered in Trinity Audio = 5.20.1,WordPress plugin developed by sergiotrinity. 🛠 Affected Version Product :...
MINI-5CMR-9886-6254
Bulletin has no description...
CVE-2026-9886 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-9886 vulnerabilities
Vulnerabilities for packages: chromium...
Linux Distros Unpatched Vulnerability : CVE-2026-9886
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Base in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...
DEBIAN-CVE-2026-9886
Use after free in Base in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-9886
A use-after-free vulnerability exists in the Base component of Google Chrome on Mac (versions prior to 148.0.7778.216) and Microsoft Edge . The flaw occurs when memory is used after being reclaimed, which could allow a remote attacker to perform a sandbox escape and execute arbitrary code via a c...
CGA-QJ4C-9VP3-9886
Bulletin has no description...
CVE-2025-9886
creationtimestamp| type| source ---|---|--- 2025-10-04 04:03:58+00:00| seen| Telegram/vKXbUCTmoHsM-Eyjweqcv2Etqe8CqhWghXUituiH8b1uak...
WordPress Trinity Audio plugin <= 5.20.2 - Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery vulnerability discovered by Moose Love in WordPress Plugin Trinity Audio versions = 5.20.2...
MAL-2025-9886 Malicious code in @zalastax/nolb-_compai_fi (npm)
The package @zalastax/nolb-compaifi was found to contain malicious code...
CVE-2024-9886
creationtimestamp| type| source ---|---|--- 2024-10-30 04:59:42+00:00| seen| https://t.me/cvedetector/9391...
CVE-2024-9886 WP Baidu Map <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The WP Baidu Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'baidumap' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-9886 WP Baidu Map <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The WP Baidu Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'baidumap' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2019-9886
Any URLs with downloadattachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1...
CVE-2019-9886
Any URLs with downloadattachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1...
CVE-2019-9886 eClass platform allows user to download arbitrary files without authentication
Any URLs with downloadattachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1...
CVE-2019-9886
CVE-2019-9886 affects BroadLearning eClass up to version ip.2.5.10.2.1, where arbitrary files can be downloaded without authentication via URLs containing download_attachment.php under templates or home folders. Root cause/impact: unauthenticated access to sensitive files (no login required). Pub...
CVE-2017-9886
IrfanView 4.44 (32‑bit) with FPX Plugin 4.46 is affected by FPX parsing vulnerabilities that can be triggered by a specially crafted .fpx file, potentially allowing arbitrary code execution or denial of service. The public details consistently attribute the issue to Data from Faulting Address and...