102 matches found
CLEANSTART-2024-WY48100 By attempting to connect a website using an unresponsive port, an attacker could have controlled the content of a tab while the URL bar displayed the original domain
Security vulnerability affects the librewolf package. By attempting to connect a website using an unresponsive port, an attacker could have controlled the content of a tab while the URL bar displayed the original domain...
CLEANSTART-2024-NY45744 By attempting to connect a website using an unresponsive port, an attacker could have controlled the content of a tab while the URL bar displayed the original domain
Security vulnerability affects the firefox package. By attempting to connect a website using an unresponsive port, an attacker could have controlled the content of a tab while the URL bar displayed the original domain...
CVE-2026-73621 GitPython before 3.1.56 Arbitrary File Truncation via Commit.count
GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count method, which forwards keyword arguments to 'git rev-list' without the checkunsafeoptions guard present in the sibling iteritems method. An attacker who can control options passed to Commit.count e.g., via an...
CVE-2026-65485
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...
EUVD-2026-48096
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...
CVE-2026-65485
CVE-2026-65485 affects the WordPress plugin Content Control
CVE-2026-65485 WordPress Content Control plugin <= 2.6.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...
CVE-2026-65485
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...
CVE-2026-65485: Missing Authorization
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...
PT-2026-63906
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...
WordPress Content Control plugin <= 2.6.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Que Thanh Tuan in WordPress Plugin Content Control versions = 2.6.5...
CVE-2026-59930
A flaw was found in Mistune, a Python Markdown parser. The table of contents toc plugin and TableOfContents directive generate heading identifiers IDs as predictable values e.g., tocN without properly processing the heading text. This allows an attacker to control content with a colliding ID, whi...
Directory Traversal
Overview liquidjs is an A simple, expressive, safe and Shopify compatible template engine in pure JavaScript. Affected versions of this package are vulnerable to Directory Traversal via the Loader.candidates resolution when require.resolve is used as a fallback; an attacker can read arbitrary...
CVE-2026-28403
Textream is a free macOS teleprompter app. Prior to version 1.5.1, the "DirectorServer" WebSocket server "ws://127.0.0.1:" accepts connections from any origin without validating the HTTP "Origin" header during the WebSocket handshake. A malicious web page visited in the same browser session can...
CVE-2018-1000604
A persisted cross-site scripting vulnerability exists in Jenkins Badge Plugin 1.4 and earlier in BadgeSummaryAction.java, HtmlBadgeAction.java that allows attackers able to control build badge content to define JavaScript that would be executed in another user's browser when that other user...
Bitrix24 Business Management Email Control
The vulnerability of the Bitrix24 business management service is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to control the content of email messages remotely...
EUVD-2020-19501
Malware in sbrugna...
EUVD-2024-16408
Malicious code in bioql PyPI...