CVE-2026-17679

Insufficient validation of untrusted input in Print Preview in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50805

Insufficient validation of untrusted input in Print Preview in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-17679

Insufficient validation of untrusted input in Print Preview in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-17679

The Chromium web browser (including Google Chrome and Microsoft Edge ) is vulnerable to a high-severity issue caused by insufficient validation of untrusted input in the Print Preview functionality. An attacker who has already compromised the renderer process can use a crafted HTML page to leak c...

CVE-2026-17679

Insufficient validation of untrusted input in Print Preview in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-17679

Insufficient validation of untrusted input in Print Preview in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-17679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Print Preview in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer...

CVE-2026-17679: Improper Input Validation

Insufficient validation of untrusted input in Print Preview in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

NewStart CGSL MAIN 6.06 : emacs Vulnerability (NS-SA-2026-0059)

The remote NewStart CGSL host, running version MAIN 6.06, has emacs packages installed that are affected by a vulnerability: - In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments. CVE-2024-30204 Note that Nessus has not tested for these issues but has instead relied...

Claude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES Attack

Anthropic says Claude Mythos Preview helped derive an end-to-end key-recovery attack against HAWK-256 and a 200- to 800-fold speedup for an attack on seven-round AES-128. The HAWK attack exploits a previously unused symmetry in the lattice behind the signature scheme. Anthropic's released...

CVE-2026-14129

An incorrect security ui flaw was found in the PreviewTab component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514018024...

OA E-Weaver SptmForPortalThumbnail - Arbitrary File Read Detection

The controllable preview parameters of SptmForPortalThumbnail.jsp are not filtered and are directly spliced to the web root directory for file downloading. !/usr/bin/env python3 -- coding: utf-8 -- """The controllable preview parameters of SptmForPortalThumbnail.""" from kittysploit import from...

Shortcode Ninja <= 1.4 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in preview-shortcode-external.php in the Shortcode Ninja plugin 1.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the shortcode parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting...

FUEL CMS 1.4.1 - Remote Code Execution Detection

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. !/usr/bin/env python3 -- coding: utf-8 -- """FUEL CMS 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info...

July 28, 2026—KB5101684 (OS Builds 26200.8973 and 26100.8973) Preview

July 28, 2026—KB5101684 OS Builds 26200.8973 and 26100.8973 Preview Applies To Windows 11 version 25H2, all editions Windows 11 version 24H2, all editions This cumulative update for Windows 11, version 25H2 and 24H2 KB5101684, includes production-quality improvements. Announcements and messages...

July 28, 2026—KB5101681 (OS Build 28000.2608) Preview

July 28, 2026—KB5101681 OS Build 28000.2608 Preview Applies To Windows 11 version 26H1, all editions This cumulative update for Windows 11, version 26H1 KB5101681, includes production-quality improvements. Announcements and messages This section provides key notifications related to this release,...

CVE-2026-56748

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository containing a symbolic link...

EUVD-2026-49570

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository containing a symbolic link...

CVE-2026-56748 Authenticated RCE via Symlink Following in Cribl Stream Pack Git Import

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository containing a symbolic link...

CVE-2026-57917

proCertum SmartSign parses external XML entities from arbitrary crafted signature files, enabling SSRF and potentially allowing the reading of local files, depending on the parser's configuration. The XML External Entity XXE vulnerability is triggered simply by previewing a file in the file...