Origin Validation Error

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Origin Validation Error via misattribution of pointerLock permission requests from in-process iframes. When...

Origin Validation Error

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Origin Validation Error via misattribution of pointerLock permission requests from in-process iframes. When a same-site,...

Origin Validation Error

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Origin Validation Error via incorrect attribution of the requesting origin in HandleExternalProtocolInUI wh...

Origin Validation Error

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Origin Validation Error via incorrect attribution of the requesting origin in HandleExternalProtocolInUI when handling...

EUVD-2026-107547

Django REST framework: TokenProxy.delete reports success and revokes nothing...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-shield 한국어 Stopgap protection for...

Origin Validation Error

Overview org.webjars.npm:webpack-dev-server is an Uses webpack with a development server that provides live reloading. It should be used for development only. Affected versions of this package are vulnerable to Origin Validation Error via the WebSocket upgrade handler in lib/Server.js when a...

Origin Validation Error

Overview webpack-dev-server is an Uses webpack with a development server that provides live reloading. It should be used for development only. Affected versions of this package are vulnerable to Origin Validation Error via the WebSocket upgrade handler in lib/Server.js when a devServer.proxy entr...

CVE-2026-114718

A flaw was found in roundcubemail. The password plugin does not properly sanitize error messages returned by password drivers before displaying them in the web interface. A remote attacker or backend service capable of controlling these error responses can execute arbitrary script code in the...

CVE-2026-114348

A flaw was found in webpack-dev-server. An unauthenticated remote attacker can exploit improper Host header validation in the open-editor endpoint to obtain sensitive technical information. By sending a request with a specially crafted Host header, the attacker triggers an internal server error...

UBUNTU-CVE-2026-114460

A flaw was found in modqos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query string during security evaluation while leaving the actual request unchanged. An unauthenticated remote attacker could exploit this...

CVE-2026-114460

A flaw was found in modqos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query string during security evaluation while leaving the actual request unchanged. An unauthenticated remote attacker could exploit this...

CVE-2026-114460

A flaw was found in modqos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query string during security evaluation while leaving the actual request unchanged. An unauthenticated remote attacker could exploit this...

undici: undici: Denial of Service via unhandled stream error on excessive content encodings

A flaw was found in undici. When an application sends a request to a malicious remote server, the server can return a response with excessive content encodings and immediately close the connection. Because the underlying response stream is left unhandled, this abrupt closure triggers an unhandled...

CVE-2026-98675

A flaw was found in the Linux kernel's Analog Devices ADE9000 driver. An off-by-one error in the interrupt handler sets an incorrect upper bound when scanning device status events. Consequently, the driver fails to detect and report Phase C power dip events to the operating system, preventing...

CLEANSTART-2026-EI53048 Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer

Security vulnerability affects the rclone package. The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

OpenBao resource management error vulnerability

Versions prior to OpenBao 2.6.4 and versions 2.7.x prior to 2.7.1 contain a resource management error vulnerability. This vulnerability arises from the rate limit quota subsystem’s failure to properly parse the role of form-encoded request bodies or forwarded certificates; as a result, quota rule...

HAProxy resource management error vulnerability

Versions prior to HAProxy 3.0.30, 3.2.26, 3.3.17, 3.4.6, and 3.5-dev9 contain a resource management error vulnerability. This vulnerability arises because the HTTP/1.1 chunked request parser repeatedly processes identical bytes without advancing its state, causing affected worker threads to...

Silicon Labs EmberZNet buffer error vulnerability

Silicon Labs EmberZNet versions 9.1.1 and earlier contain a buffer error vulnerability. This vulnerability arises from an out-of-bounds write when processing malformed GetGroupMembership messages, potentially leading to a crash...

Pascal Buchbinder mod_qos buffer error vulnerability

Versions 11.74, 11.76, and 11.79 of Pascal Buchbinder’s modqos contain a buffer error vulnerability. This vulnerability arises when processing percent-encoded inputs during JSON body filtering; improper termination of strings can lead to reading beyond allocated memory boundaries. As a result,...