@xwiki/cristal-electron-main (>=1.3.0, <=1.5.0), cicy-desktop (>=2.1.30, <=2.1.367) +2 more potentially affected by CVE-2026-70603 via electron (>=41.0.3, <=41.1.0)

electron NPM version =41.0.3, =1.3.0, =2.1.30, =0.1.0, =1.0.5, =1.3.0 Source cves: CVE-2026-70603 Source advisory: SNYK:JS-ELECTRON-18563328...

@finsemble/finsemble-core (>=9.10.13-beta.1, <=9.10.28), @finsemble/finsemble-electron-adapter (>=9.10.13-beta.1, <=10.3.2-beta.1) +8 more potentially affected by CVE-2026-70600 via electron (>=41.0.3, <=41.2.0)

electron NPM version =41.0.3, =9.10.13-beta.1, =9.10.13-beta.1, =5.0.0, =1.3.0, =2.1.30, =0.1.0, =0.3.73, =1.0.5, =1.3.0 Source cves: CVE-2026-70600 Source advisory: SNYK:JS-ELECTRON-18563354...

EUVD-2025-27172

Malicious code in bioql PyPI...

CVE-2025-52389

An Insecure Direct Object Reference IDOR in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attackers to access sensitive data for other users via a crafted HTTP request...

CVE-2025-52389

An Insecure Direct Object Reference IDOR in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attackers to access sensitive data for other users via a crafted HTTP request...

CVE-2025-52389

An Insecure Direct Object Reference IDOR in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attackers to access sensitive data for other users via a crafted HTTP request...

CVE-2025-52389: Authorization Bypass Through User-Controlled Key

An Insecure Direct Object Reference IDOR in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attackers to access sensitive data for other users via a crafted HTTP request...

PT-2025-36502

Name of the Vulnerable Software and Affected Versions: Envasadora H2O Eireli - Soda Cristal version 40.20.4 Description: An Insecure Direct Object Reference IDOR exists in Envasadora H2O Eireli - Soda Cristal version 40.20.4. Authenticated attackers can access sensitive data belonging to other...

CVE-2025-52389

An Insecure Direct Object Reference IDOR in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attackers to access sensitive data for other users via a crafted HTTP request...

CVE-2025-52389

Envasadora H2O Eireli - Soda Cristal version v40.20.4 is vulnerable to an Insecure Direct Object Reference (IDOR) . This flaw allows authenticated attackers to access sensitive data belonging to other users by submitting a crafted HTTP request . While the vulnerability is confirmed, there is curr...

Envasadora H2O Soda Cristal 安全漏洞

Envasadora H2O Soda Cristal is an application from Envasadora H2O, Brazil. A security vulnerability exists in Envasadora H2O Soda Cristal version v40.20.4, which stems from an insecure direct object reference that could lead to the disclosure of sensitive data...

@finsemble/finsemble-core (>=8.15.0-beta.1, <=9.8.1-test.1), @finsemble/finsemble-electron-adapter (>=8.15.0-beta.1, <=9.8.1-test.1) +4 more potentially affected by CVE-2025-55305 via electron (>=35.0.0, <=35.5.1)

electron NPM version =35.0.0, =8.15.0-beta.1, =8.15.0-beta.1, =1.1.0, =0.16.0, =1.0.10, =1.0.16 Source cves: CVE-2025-55305 Source advisory: SNYK:JS-ELECTRON-12485155...

cristal-rentacar.ro Cross Site Scripting vulnerability OBB-2506964

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

horizonte-cristal---habinedita-74.empreendimentos.com.pt XSS vulnerability

Open Bug Bounty ID: OBB-629099 Description| Value ---|--- Affected Website:| horizonte-cristal---habinedita-74.empreendimentos.com.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting /...

cristal-et-bronze.com XSS vulnerability

Open Bug Bounty ID: OBB-598847 Description| Value ---|--- Affected Website:| cristal-et-bronze.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Roxio CinePlayer 3.2 (SonicMediaPlayer.dll) Remote BOF Exploit

Exploit for windows platform in category remote exploits ============================================================== Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF Exploit ============================================================== Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF...

Roxio CinePlayer 3.2 - SonicMediaPlayer.dll Remote Buffer Overflow

Roxio CinePlayer 3.2 - SonicMediaPlayer.dll Remote Buffer Overflow Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF Exploit Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF Exploit Advisory from secunia 22251 By : Super-cristal Greetings: His0k4, snakespc.com Tested on Windows Xp Sp2...

CastRipper 2.50.70 (.m3u) Universal Stack Overflow Exploit (py)

Exploit for unknown platform in category local exploits =============================================================== CastRipper 2.50.70 .m3u Universal Stack Overflow Exploit py =============================================================== !/usr/bin/python print "" print " CastRipper 2.50.70...

My Dealer CMS 2.0 - Authentication Bypass

My Dealer CMS 2.0 - Authentication Bypass ----------------------------------------------------- ----------------------------------------------------- My Dealer Cms 2.0 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home: www.h4ckf0ru.co...

Absolute Form Processor SQL Injection

----------------------------------------------------- ----------------------------------------------------- Absolute Form Processor XE-V 1.5 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home: www.h4ckf0ru.com Vive Algerie demo :...