CVE-2026-13982

An incorrect security ui flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514006829...

CVE-2026-13969

An uninitialized use flaw was found in the UI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513762962...

CVE-2026-13980

An incorrect security ui flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513989973...

CVE-2026-13973

An inappropriate implementation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513832989...

CVE-2026-14026

An incorrect security ui flaw was found in the SplitView component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=507263861...

CVE-2026-13987

An incorrect security ui flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514039122...

CVE-2026-13998

An incorrect security ui flaw was found in the File Input component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514070501...

CVE-2026-14028

An incorrect security ui flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=401816601...

CVE-2026-14030

An incorrect security ui flaw was found in the SplitView component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=488762971...

CVE-2026-14123

An incorrect security ui flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513856644...

CVE-2026-14126

An incorrect security ui flaw was found in the UI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513992796...

CVE-2026-14141

An incorrect security ui flaw was found in the Document Picture-in-Picture component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514072867...

CVE-2026-14144

An incorrect security ui flaw was found in the Views component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514079793...

CVE-2026-49332 Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreams

A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using only dash-variant keys X-Forwarded-User but does not strip underscore-variant keys XForwardedUser from incoming requests. WSGI and PHP frameworks normalize both variants to the same variable, allowing a...

CVE-2026-15108

An integer overflow flaw was found in the Extensions API component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=515443146...

Buffalo WSR-2533DHPL2 - Path Traversal Detection

Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 are susceptible to a path traversal vulnerability that could allow unauthenticated remote attackers to bypass authentication in their web interfaces. !/usr/bin/env python3 -- coding: utf-8 -- """Buffalo...

Progress Kemp LoadMaster - Command Injection Detection

Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution. !/usr/bin/env python3 -- coding: utf-8 -- """Unauthenticated remote attackers can access the system through the LoadMaster management interface, enablin...

Aquatronica Controller System <= 5.1.6 - Information Disclosure Detection

Aquatronica Controller System firmware 5.1.6 and earlier and web interface 2.0 and earlier contain an information disclosure vulnerability caused by unauthenticated access to tcp.php endpoint, letting remote attackers retrieve sensitive configuration data including plaintext credentials, exploit...

Powertek Firmware <3.30.30 - Authorization Bypass Detection

Powertek firmware multiple brands before 3.30.30 running Power Distribution Units are vulnerable to authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface /cgi/getparam.cgi with the tmpToken cookie set to an...

Allied Telesis AT-GS950/8 - Local File Inclusion Detection

Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 is susceptible to local file inclusion via its web interface. !/usr/bin/env python3 -- coding: utf-8 -- """Allied Telesis AT-GS950/8 until Firmware AT-S107 V.""" import re from kittysploit import from lib.protocols.http.httpclient import...