494783 matches found
USN-8747-1: Beets vulnerability
It was discovered that Beets incorrectly escaped untrusted media metadata in its web interface. An attacker could possibly use this issue to inject arbitrary HTML or execute arbitrary JavaScript code in a user's browser...
CVE-2026-81468
Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
EUVD-2026-75570
Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
CVE-2026-81468
Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
CVE-2026-81468
Dell ThinOS 10 , versions prior to 2605_10.2616 , is affected by an OS Command Injection vulnerability (Improper Neutralization of Special Elements used in an OS Command). A high-privileged attacker with remote access could potentially exploit this flaw to achieve command execution on the device....
EUVD-2026-75568
Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
CVE-2026-81467
Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
CVE-2026-81467
Dell ThinOS 10 (versions prior to 2605_10.2616 ) is affected by an OS Command Injection vulnerability. An unauthenticated attacker with remote network access can exploit this flaw to achieve arbitrary command execution on the device. Dell assigned a CVSS v3.1 score of 9.8 (Critical) , reflecting ...
CVE-2026-81467
Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
CVE-2026-81048
Dell ThinOS 10, versions prior to 260510.2616, contain an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote Code execution...
CVE-2026-81048
Dell ThinOS 10 , versions prior to 2605_10.2616 , is affected by a Command Injection vulnerability (Improper Neutralization of Special Elements used in a Command). An unauthenticated attacker with adjacent network access could exploit this to achieve Remote Code Execution , with a CVSS 3.1 score ...
EUVD-2026-75561
Dell ThinOS 10, versions prior to 260510.2616, contain an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote Code execution...
CVE-2026-81800
Unauthenticated SQL Injection in Verified Reviews Avis Vérifiés = 2.4.6 versions...
CVE-2026-81784
Unauthenticated PHP Object Injection in Wise Chat = 3.4 versions...
CVE-2026-66632
Unauthenticated Content Injection in Simple Cloudflare Turnstile = 1.42.1 versions...
EUVD-2026-75181
Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions...
GHSA-3PF7-Q2G3-WJ28 Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions
Summary The chat-completions endpoint reads a folder id out of the request body and saves the newly created chat into that folder without checking that the caller is allowed to write there. Any authenticated user who knows a folder's id can put a chat of their own into another user's folder,...
Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions
Summary The chat-completions endpoint reads a folder id out of the request body and saves the newly created chat into that folder without checking that the caller is allowed to write there. Any authenticated user who knows a folder's id can put a chat of their own into another user's folder,...
@eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name
Summary Embedded font-family names word/fontTable.xml were interpolated unescaped into an injected @font-face and into the print window's document.write. A crafted name injects page-wide CSS on open, and breaks out of into executable HTML on Print. Impact Opening a crafted .docx applies...