89 matches found
CVE-2015-5119
CVE-2015-5119 A COOP like exploit...
CVE-2026-108810
A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument func results in information disclosure. The attack can be executed remotely. The exploit has been released to t...
CVE-2026-108810
The tsi-coop tsi-dpdp-cms software (versions 0.5.0 , 0.5.1 , and 0.5.2 ) is vulnerable to an information disclosure flaw within the JSON Schema Validation component. The root cause is the improper handling of the _func argument, which allows an unauthenticated remote attacker to execute the attac...
EUVD-2026-97283
A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument func results in information disclosure. The attack can be executed remotely. The exploit has been released to t...
CVE-2026-108810 tsi-coop tsi-dpdp-cms JSON Schema Validation information disclosure
A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument func results in information disclosure. The attack can be executed remotely. The exploit has been released to t...
CVE-2026-108810 tsi-coop tsi-dpdp-cms JSON Schema Validation information disclosure
A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the argument func results in information disclosure. The attack can be executed remotely. The exploit has been released to t...
chicken-coop (>=0.0.1, <=0.0.5), im-openai (0.8.2) potentially affected by CVE-2026-102937 via virtualenv (20.24.2)
virtualenv PYPI version 20.24.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - chicken-coop =0.0.1, =0.0.5 - im-openai 0.8.2 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...
CLEANSTART-2024-JC18664 Policy bypass in COOP in Google Chrome prior to 98
Security vulnerability affects the chromium package. Policy bypass in COOP in Google Chrome prior to 98...
CLEANSTART-2024-AQ78827 Insufficient policy enforcement in COOP in Google Chrome prior to 102
Security vulnerability affects the chromium package. Insufficient policy enforcement in COOP in Google Chrome prior to 102...
chicken-coop (>=0.0.1, <=0.0.5), im-openai (0.8.2) potentially affected by CVE-2026-102930 via virtualenv (20.24.2)
virtualenv PYPI version 20.24.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - chicken-coop =0.0.1, =0.0.5 - im-openai 0.8.2 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...
chicken-coop (>=0.0.1, <=0.0.5), im-openai (0.8.2) potentially affected by CVE-2026-102937 via virtualenv (20.24.2)
virtualenv PYPI version 20.24.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - chicken-coop =0.0.1, =0.0.5 - im-openai 0.8.2 Source cves: CVE-2026-102937 Source advisory: OSV:PYSEC-2026-4014...
Astra Linux – Vulnerability in Chromium
In COOP mode in Google Chrome prior to version 98.0.4758.80, it was possible for a remote attacker to bypass the iframe sandbox through a crafted HTML page...
CVE-2026-84841 tsi-coop tsi-dpdp-cms client-side enforcement of server-side security
A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The manipulation results in client-side enforcement of server-side security. The attack can be launched remotely. The exploit has been released to the public and may be used for...
EUVD-2026-70255
A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The manipulation results in client-side enforcement of server-side security. The attack can be launched remotely. The exploit has been released to the public and may be used for...
CVE-2026-84841 tsi-coop tsi-dpdp-cms client-side enforcement of server-side security
A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The manipulation results in client-side enforcement of server-side security. The attack can be launched remotely. The exploit has been released to the public and may be used for...
CVE-2026-84841
tsi-coop tsi-dpdp-cms versions up to 0.5.0 contain a flaw where server-side security is enforced only on the client side , allowing a remote, unauthenticated attacker to bypass authentication via direct HTTP requests. The exploit has been published as a proof-of-concept (see exploit repository )....
CVE-2026-84841: Client-Side Enforcement of Server-Side Security
A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The manipulation results in client-side enforcement of server-side security. The attack can be launched remotely. The exploit has been released to the public and may be used for...
CVE-2026-84840: Missing Authentication for Critical Function
A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of the file InterceptingFilter.java of the component Bootstrap Setup Endpoint. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly availabl...
CVE-2026-84839: Missing Authentication for Critical Function
A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some unknown functionality of the file web.xml of the component Admin Console/DPO Compliance Console. Executing a manipulation can lead to missing authentication. It is possible to launch the attack...
cloudxns-ddns-service (1.0.0), coderedcms (>=0.10.0, <=0.14.1) +84 more potentially affected by CVE-2026-53877 via django (2.1.15)
django PYPI version 2.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cloudxns-ddns-service 1.0.0 - coderedcms =0.10.0, =2.4.0, =0.3.1, =0.1.6, =0.2.0, =1.3.2, =1.3.3 - django-basicauth 0.5.1 - django-brunch 1.0.3 -...