4805 matches found
Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting
CVE-2021-46078 Título del Exploit: Vehicle Service Management System - 'Múltiple' Carga de archivos conduce a Cross-Site Scripting Almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIO Referencias:...
Thruk-CVE-2023-34096
Thruk-CVE-2023-34096 Las versiones = v3.06 de Thruk Monitoring Web Interface son vulnerables a CVE-2023-34096 Path Traversal. El exploit actual está hecho en Python 3 y explota la vulnerabilidad para subir un archivo PoC a varias carpetas comunes de Thruk y también a algunas carpetas de Linux. CV...
Vehicle-Service-Management-System-Mechanic-List-Stored-Cross-Site-Scripting-XSS
CVE-2021-46069 Título del Exploit: Vehicle Service Management System - 'Mechanic List' Cross Site Scripting XSS Almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIO Referencias:...
CVE-2026-87566
CVE-2026-87566 is an observable discrepancy in the Layout component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could exploit this by serving a crafted HTML page to leak sensitive information from the user's browser. Chromium classifies the severity as Medium . The fix was...
CVE-2026-87431
CVE-2026-87431 is a missing authorization vulnerability in the Extensions component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker could obtain sensitive information by delivering a crafted Chrome extension to the victim. Chromium assigns a Medium security severi...
EUVD-2026-74396
Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74390
Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87541
CVE-2026-87541 is an information leak in the Navigation component of Google Chrome , affecting versions prior to 153.0.8010.36 . The flaw allows a remote attacker who has already compromised the renderer process to bypass site isolation by delivering a crafted HTML page. Chromium rates the severi...
EUVD-2026-74370
UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87462
A UI misrepresentation vulnerability in the FedCM (Federated Credentials Management) component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker, leveraging social engineering , to spoof UI elements via a crafted HTML page. The Chromium project assigned this a Medium secur...
EUVD-2026-74366
UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74365
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87573
CVE-2026-87573 is an improper input validation vulnerability in the Network component of Google Chrome prior to version 153.0.8010.36 . It allows a remote attacker to bypass the web origin policy by serving a crafted HTML page, rated Medium severity by the Chromium team. The fix is available in C...
CVE-2026-87479
CVE-2026-87479 affects the Extensions component of Google Chrome prior to version 153.0.8010.36 , caused by an insufficient policy enforcement . A remote attacker who had already compromised the renderer process and leveraged social engineering could potentially execute arbitrary code outside the...
EUVD-2026-74349
Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74530
Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88694
Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88632
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88595
Information leak in Scroll in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...