CVE-2026-90914 Joomla! Core - [20260904] - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260904 - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - Lack of escaping leads to an XSS vulnerability in the generic audio and video output layouts...

CVE-2026-90914 Joomla! Core - [20260904] - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260904 - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - Lack of escaping leads to an XSS vulnerability in the generic audio and video output layouts...

CVE-2026-90914

A cross-site scripting (XSS) vulnerability exists in Joomla! Core versions 4.0.0-5.4.8 and 6.0.0-6.1.3 . The root cause is a lack of escaping within the generic audio and video output layouts . This flaw allows an attacker to execute malicious scripts in the context of a user's session. No specif...

CVE-2026-54337-PoC

CVE-2026-54337 PoC CVE-2026-54337 - fireshare test.mp4 步骤 2 ：运行以下 curl 命令（务必替换占位符 ） $ curl -s -w "HTTP %httpcode\n" \ -F "file=@;filename= -selectstreams v.mp4" \ -F "folder=testfolder -o " \ http:///api/upload/public 例如，要覆盖 /data/db.sqlite，请将命令修改为如下形式 $ curl -s -w "HTTP %httpcode\n" \ -F...

glass-cage-i18-2025-24085-and-cve-2025-24201

（原始分叉网络已保留） 玻璃牢笼：针对 iOS 18.2.1 的零点击 PNG 漏洞利用链 CVE-2025-24201 – WebKit 远程代码执行 CVE-2025-24085 – Core Media 权限提升 报告给 Apple： 2025 年 1 月 9 日 已修补： 2025 年 2 月–3 月 测试设备： iPhone 14 Pro Max（iOS 18.2.1） CVSS 基础评分： 9.8（严重） 摘要 Glass Cage 是一个关键的、基于 PNG 的零点击漏洞利用链，在野 被发现，针对 iOS...

CVE-2026-102261

A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted is the function crop of the file app/controllers/camaleoncms/admin/mediacontroller.rb of the component Media Crop Handler. This manipulation of the argument savedavatar causes authorization bypass. The attack may be initiated...

CVE-2026-102261 owen2345 Camaleon CMS Media Crop media_controller.rb crop authorization

A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted is the function crop of the file app/controllers/camaleoncms/admin/mediacontroller.rb of the component Media Crop Handler. This manipulation of the argument savedavatar causes authorization bypass. The attack may be initiated...

EUVD-2026-88630

A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted is the function crop of the file app/controllers/camaleoncms/admin/mediacontroller.rb of the component Media Crop Handler. This manipulation of the argument savedavatar causes authorization bypass. The attack may be initiated...

CVE-2026-102261

A flaw exists in owen2345 Camaleon CMS up to version 2.9.2 within the Media Crop Handler component. Specifically, the crop function in app/controllers/camaleon_cms/admin/media_controller.rb is vulnerable to an authorization bypass caused by the manipulation of the saved_avatar argument. This vuln...

CVE-2026-102261 owen2345 Camaleon CMS Media Crop media_controller.rb crop authorization

A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted is the function crop of the file app/controllers/camaleoncms/admin/mediacontroller.rb of the component Media Crop Handler. This manipulation of the argument savedavatar causes authorization bypass. The attack may be initiated...

CVE-2026-102261 owen2345 Camaleon CMS Media Crop media_controller.rb crop authorization

A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted is the function crop of the file app/controllers/camaleoncms/admin/mediacontroller.rb of the component Media Crop Handler. This manipulation of the argument savedavatar causes authorization bypass. The attack may be initiated...

[SECURITY] Fedora 44 Update: vlc-3.0.24-1.fc44

VLC media player is a highly portable multimedia player and multimedia framew ork capable of reading most audio and video formats as well as DVDs, Audio CDs VC Ds, and various streaming protocols. It can also be used as a media converter or a server to stream in uni-cast or multi-cast in IPv4 or...

ROS-20260929-73-0202

The vulnerability of the adv7842cplogstatus function in the drivers/media/i2c/adv7842.c file of the Linux kernel-based multimedia device driver involves a lack of checking for the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

jackson-databind-2.18.11-1.1 on GA media (moderate)

jackson-databind-2.18.11-1.1 on GA media Announcement ID: openSUSE-SU-2026:11877-1 Rating: moderate Cross-References: CVE-2026-19032 CVE-2026-68497 CVE-2026-83557 CVE-2026-91776 CVE-2026-91777 CVSS scores: CVE-2026-19032 SUSE : 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L CVE-2026-19032 SUSE ...

goose-1.51.0-1.1 on GA media (moderate)

goose-1.51.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11874-1 Rating: moderate Cross-References: CVE-2026-85623 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the goose-1.51.0-1.1...

OPENSUSE-SU-2026:11915-1 binaryen-133-1.1 on GA media

These are all security issues fixed in the binaryen-133-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11927-1 python313-litellm-1.103.0-1.1 on GA media

These are all security issues fixed in the python313-litellm-1.103.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11928-1 python313-pyramid-2.1-2.1 on GA media

These are all security issues fixed in the python313-pyramid-2.1-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-102848

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description An uninitialized resource in the Media component on Windows allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a...

jackson-dataformat-csv-2.18.11-1.1 on GA media (moderate)

jackson-dataformat-csv-2.18.11-1.1 on GA media Announcement ID: openSUSE-SU-2026:11879-1 Rating: moderate Cross-References: CVE-2026-85278 CVSS scores: CVE-2026-85278 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-85278 SUSE : 8.7...