Bludit CMS 3.20.0 - Reflected Cross-Site Scripting

Exploit Title: Bludit CMS 3.20.0 - Reflected Cross-Site Scripting Date: 2026-08-11 Exploit Author: Ranjit Kumar Singh Vendor Homepage: https://www.bludit.com/ Software Link: https://github.com/bludit/bludit/archive/refs/tags/3.20.0.zip Version: 3.0.0 through 3.20.0 all versions before commit...

RockyLinux 9 : wget (RLSA-2026:62143)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62143 advisory. wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption CVE-2026-58471 wget: GNU Wget: Arbitrary code execution or...

Linux Distros Unpatched Vulnerability : CVE-2026-84124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbi...

PT-2026-84714

The Icegram Express WordPress plugin before 5.8.6 does not properly escape a list description setting before outputting it within an HTML attribute, which could allow users with the Administrator role and above to perform Stored Cross-Site Scripting attacks...

CSS Component Data Compromise

The CSS component vulnerability in Google Chrome and Microsoft Edge is related to a flaw in the source verification mechanism. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The DOM component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploiting this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Layout component Google Chrome Microsoft Edge Data Access

The Layout component vulnerability in Google Chrome and Microsoft Edge web browsers is related to reading beyond the permitted boundaries of the data buffer. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

WebAppInstalls Component Compromise Data Compromise

The vulnerability in the WebAppInstalls component of Google Chrome and Microsoft Edge is related to a flaw in the source verification mechanism. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

Isolated Web Apps Data Compromise

The vulnerability in the Isolated Web Apps component of Google Chrome and Microsoft Edge web browsers is related to a lack of proper data security mechanisms. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the Serial component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by using a specially crafted HTML page...

Bluetooth Component DoS

The vulnerability in the Bluetooth components of Google Chrome and Microsoft Edge is related to the implementation of client-side security features. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Google Chrome Microsoft Edge Sensitive Data Access

The vulnerability in the Password component of Google Chrome and Microsoft Edge web browsers is related to access control flaws. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

SplitView Component Data Compromise

The vulnerability in the SplitView component of Google Chrome and Microsoft Edge web browsers is related to access control flaws. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

Google Chrome Microsoft Edge Data Compromise Service Outage

The UI component vulnerability in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploitation of this vulnerability enables a remote attacker to compromise data integrity and trigger a denial-of-service condition via a specially...

Google Chrome Microsoft Edge Data Compromise

The Permissions control element vulnerability in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

Google Chrome Microsoft Edge Storage Access Data Bypass

The vulnerability in the StorageAccessAPI component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the SignIn component of Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploiting this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the Serial component of Google Chrome and Microsoft Edge web browsers is related to the implementation of client-side security features. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by using a specially crafted HTML page...

GamepadAPI Component Sensitive Data Access

The vulnerability in the GamepadAPI component of Google Chrome and Microsoft Edge is related to errors in variable initialization. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

Dawn Component Sensitive Data Access

The vulnerability in the Dawn component of Google Chrome and Microsoft Edge web browsers is related to access control flaws. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...