14044 matches found
SUSE CVE-2026-79288
Improper input validation in Autofill in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: High...
GHSA-MM85-Q63V-4476
creationtimestamp| type| source ---|---|--- 2026-08-26 17:00:03+00:00| published-proof-of-concept| https://t.me/bdufstecru/3411 2026-08-27 00:00:09+00:00| published-proof-of-concept| https://t.me/bdufstecru/3411...
CVE-2026-54616
creationtimestamp| type| source ---|---|--- 2026-08-26 17:00:03+00:00| published-proof-of-concept| https://t.me/bdufstecru/3412 2026-08-27 00:00:09+00:00| published-proof-of-concept| https://t.me/bdufstecru/3412...
CVE-2026-54606
creationtimestamp| type| source ---|---|--- 2026-08-26 16:35:08+00:00| published-proof-of-concept| https://github.com/JiHong88/suneditor/security/advisories/GHSA-w93q-cq9w-58p7...
CVE-2026-54569
creationtimestamp| type| source ---|---|--- 2026-08-26 16:35:06+00:00| published-proof-of-concept| https://github.com/senaite/senaite.core/security/advisories/GHSA-jrw6-7x4q-w25j 2026-08-26 18:07:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtywgakaxb2t 2026-08-26...
CVE-2026-79044
A flaw was found in WebAppInstalls in Google Chrome on Android. A remote attacker, after compromising the renderer process, could exploit missing authorization by using a specially crafted HTML page. This could allow the attacker to obtain sensitive information...
CVE-2026-79133
A flaw was found in chromium-browser. A remote attacker could exploit an incorrect authorization vulnerability in the Forms component by crafting a malicious HTML page. This could allow the attacker to obtain sensitive information from the user...
CVE-2026-81032
creationtimestamp| type| source ---|---|--- 2026-08-26 16:21:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gwmyjb6znooem 2026-08-26 17:02:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtysr22mzi2r 2026-08-26 18:08:00+00:00| seen|...
CVE-2026-54614
DebugKit provides a debugging toolbar for CakePHP applications. Prior to 4.10.3 and 5.2.4, the DebugKit MailPreview feature in src/Controller/MailPreviewController.php accepts a route-controlled previewName value in findPreview and passes the resolved class from App::className to constructor...
CVE-2026-80426
FiftyOne (Voxel51) is vulnerable to stored cross-site scripting in versions before 1.21.0 . The sidebar field-information component at FieldLabelAndInfo/index.tsx passes a dataset field's description to React's dangerouslySetInnerHTML without escaping or sanitizing, making it the only raw render ...
CVE-2026-80543
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Pad trailing CCA or EP11 message with zeros The both functions xcrbmsgtotype6cprbmsgx and xcrbmsgtotype6ep11cprbmsgx copy the user space message into a kernel buffer based on the message length. But on further...
UBUNTU-CVE-2026-80543
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Pad trailing CCA or EP11 message with zeros The both functions xcrbmsgtotype6cprbmsgx and xcrbmsgtotype6ep11cprbmsgx copy the user space message into a kernel buffer based on the message length. But on further...
EUVD-2026-66458
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Pad trailing CCA or EP11 message with zeros The both functions xcrbmsgtotype6cprbmsgx and xcrbmsgtotype6ep11cprbmsgx copy the user space message into a kernel buffer based on the message length. But on further...
MINI-8MXF-F793-4VF7
Bulletin has no description...
MAL-2026-14536 Malicious code in mt-ts-serverless-starter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53da5b8989180a10122e1e8ab801ab76dc7587761bb58d05377359b8f8e09d52 package.json declares a preinstall hook that runs node index.js on every npm install. index.js collects installer host identity and system files —...
Malicious code in mt-ts-serverless-starter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53da5b8989180a10122e1e8ab801ab76dc7587761bb58d05377359b8f8e09d52 package.json declares a preinstall hook that runs node index.js on every npm install. index.js collects installer host identity and system files —...
Starlette-Admin's unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS
Summary Affected versions of Starlette-Admin prior to 0.16.1 do not properly validate user-supplied sort and search parameters against the configured field allowlists. While the administrative UI restricts available fields based on field configuration, the backend accepts arbitrary field names...
MINI-CWPF-47WG-648V
Bulletin has no description...