CVE-2026-50228

An unauthenticated local attacker can exploit a vulnerability in Acer NitroSense software (versions up to and including 5.2.63 ) by connecting to an exposed Electron DevTools endpoint on localhost TCP port 9993 . The root cause is that Chromium remote debugging remains enabled in the production a...

Linux Distros Unpatched Vulnerability : CVE-2026-95368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially obtain...

Linux Distros Unpatched Vulnerability : CVE-2026-95274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially...

Linux Distros Unpatched Vulnerability : CVE-2026-95373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the...

Linux Distros Unpatched Vulnerability : CVE-2026-95362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site request forgery in DevTools. CVE-2026-95362 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

Linux Distros Unpatched Vulnerability : CVE-2026-95300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access...

Linux Distros Unpatched Vulnerability : CVE-2026-95344

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafte...

Linux Distros Unpatched Vulnerability : CVE-2026-95361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a...

Linux Distros Unpatched Vulnerability : CVE-2026-95352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy...

CVE-2026-50228: Active Debug Code

An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed by Acer NitroSense software versions up to and including 5.2.63 on localhost TCP port 9993. Because Chromium remote debugging is enabled in the production application, the attacker can execute JavaScript in th...

Linux Distros Unpatched Vulnerability : CVE-2026-95376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Externally controlled reference in DevTools. CVE-2026-95376 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 8090...

PT-2026-97206

Name of the Vulnerable Software and Affected Versions Acer NitroSense versions prior to 5.2.64 Description An unauthenticated local attacker can connect to the Electron DevTools endpoint exposed on localhost TCP port 9993. This occurs because Chromium remote debugging is enabled within the...

Google Chrome < 154.0.8037.57 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 154.0.8037.57. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop0856730748 advisory. - Use after free in DevTools. CVE-2026-95373 - Improper output...

Google Chrome < 154.0.8037.57 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 154.0.8037.57. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop0856730748 advisory. - Use after free in DevTools. CVE-2026-95373 - Improper output encodin...

firefox-devtools-mcp v0.10.3

Firefox DevTools MCP Model Context Protocol server for automating Firefox via WebDriver BiDi through Selenium WebDriver. Works with Claude Code, Claude Desktop, Cursor, Cline and other MCP clients. Repository: https://github.com/mozilla/firefox-devtools-mcp Note : This MCP server requires a local...

Exploit for Improper Verification of Cryptographic Signature in Jfrog Artifactory

hpim-training-lab HPIM Training-Case Replication Lab Thi...

CVE-2026-92055

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DevTools component...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in spring boot (CVE-2026-40972)

Summary IBM Db2 Developer Extension is affected by vulnerability in spring boot CVE-2026-40972 Vulnerability Details CVEID:CVE-2026-40972 DESCRIPTION: An attacker on the same network as the remote application may be able to utilize a timing attack to discover information about the remote secret. ...

Linux Distros Unpatched Vulnerability : CVE-2026-92055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

Google Chrome Authorization Vulnerability (CNVD-2026-37839)

Google Chrome is a free web browser developed by Google Inc. Google Chrome has a permission-related vulnerability, which stems from improper permissions in DevTools. Attackers can exploit this vulnerability to execute arbitrary code outside the sandbox through specially crafted HTML pages...