CVE-2026-14802 react create-react-app react-dev-utils openBrowser.js startBrowserProcess os command injection

A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-utils. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The...

CVE-2026-14802

CVE-2026-14802 affects react-create-app releases up to 5.0.1 on macOS, targeting the startBrowserProcess function in openBrowser.js within react-dev-utils. The root cause is an input manipulation that enables OS command injection, with remote exploitation described as possible and the exploit pub...

CVE-2026-14802

A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-utils. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The...

CVE-2026-14802 react create-react-app react-dev-utils openBrowser.js startBrowserProcess os command injection

A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-utils. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The...

CVE-2026-14802 react create-react-app react-dev-utils openBrowser.js startBrowserProcess os command injection

A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-utils. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The...

CVE-2026-14807: Use of Hard-coded Credentials

ERP App developed by PROG MIS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to view application code and obtain the database account and password...

PT-2026-55871

A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-utils. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The...

CVE-2026-14802: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-utils. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The...

📄 MacOS PackageKit ZSH Environment Privilege Escalation

This Metasploit module exploits CVE-2024-27822, a vulnerability in macOS PackageKit.framework where PKG installer scripts using a ZSH shebang !/bin/zsh are executed as root while inheriting the installing users environment. This causes ZSH to load the users /.zshenv with root privileges before th...

PT-2026-105512

A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-utils. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The...

PT-2026-55971

Name of the Vulnerable Software and Affected Versions OpenAI Codex for macOS affected versions not specified Description The desktop application renders remote images from Markdown within model responses. An attacker can use indirect prompt injection—a technique where malicious instructions are...

CVE-2026-59520

creationtimestamp| type| source ---|---|--- 2026-07-05 23:59:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwrsytwez2p 2026-07-07 08:04:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq25geh37n2v...

CVE-2026-10513

creationtimestamp| type| source ---|---|--- 2026-07-05 23:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpwpftltek2h...

CVE-2025-67316

creationtimestamp| type| source ---|---|--- 2026-07-05 19:40:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwdf6kzfn2j...

CVE-2025-64637

creationtimestamp| type| source ---|---|--- 2026-07-05 17:16:22+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpw3clcpzv2p...

CVE-2026-14634

creationtimestamp| type| source ---|---|--- 2026-07-04 20:05:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mptucx6eos2a...

SQL-Injection-on-DVWA-OASIS-TASK-03

SQL Injection on DVWA Low Security Objective The object...

CVE-2025-71353

creationtimestamp| type| source ---|---|--- 2026-07-04 04:38:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpsahzpup32z 2026-07-04 16:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mptgmha4ar2u...

CVE-2026-58286

creationtimestamp| type| source ---|---|--- 2026-07-04 01:39:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mprwj2iusx25 2026-07-05 03:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpuli5jfby2t 2026-07-05 23:01:39+00:00| seen|...

CVE-2026-8924

creationtimestamp| type| source ---|---|--- 2026-07-03 21:36:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprivwaz5n23 2026-09-14 11:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvhxwx34cu2r 2026-09-29 12:01:03+00:00| seen|...