990270 matches found
CVE-2026-80104
DB-GPT 0.8.0 is affected by a path traversal vulnerability in the skill_upload endpoint (in agentic_data_api.py). The function constructs the destination path using the multipart filename directly via the / operator without canonicalization or a containment check under the upload directory. An ab...
CVE-2025-55182-react2shell
react2shell CVE-2025-55182 Toolkit. Scanner + Exploit für unauthorisierte RCE in Next.js via RSC-Payload-Injection. Node.js Exploit: keine Abhängigkeiten. Bash-Scanner: prüft einzelne URLs oder Bulk-Listen. Exploit root@kitploit: Single command with output ./react2shell.mjs -t http://target:3000 ...
CVE-2026-65105
NVIDIA NemoClaw for Linux contains an unauthenticated access vulnerability in its inference server setup , allowing a remote attacker on an adjacent network to reach the inference service without credentials. A successful exploit can result in information disclosure and denial of service . The CV...
EUVD-2026-66095
NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...
CVE-2026-65098
NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow that allows an attacker to cause weak authentication . A successful exploit could lead to code execution , information disclosure , and data tampering . The CVSS 3.1 score is 8.1 (HIGH) , with a network attack...
CVE-2026-65098
NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...
CVE-2026-78964
Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78914
CVE-2026-78914 is an uninitialized resource vulnerability in the Skia rendering library within Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit it by serving a crafted HTML page, potentially allowing memory reads inside the Chrome sandbox (information disclosure). Th...
CVE-2026-79254
CVE-2026-79254 is an incorrect reference resolution vulnerability in the CustomTabs component of Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker can exploit it via a crafted HTML page to bypass system access restrictions. Chromium rates it Low severity; the CVSS 3.1 sc...
CVE-2026-79254
Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79133
Incorrect authorization in Forms in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79179
Incorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79133
CVE-2026-79133 is an incorrect authorization flaw in the Forms component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can craft a malicious HTML page to obtain sensitive information from a user. The NVD assigns a CVSS 3.1 score of 6.5 (Medium) with vector AV:N/...
CVE-2026-79105
Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79105
CVE-2026-79105 is an improper input validation flaw in Google Chrome Mobile on iOS , fixed in version 152.0.7977.65 . A remote attacker can bypass system access restrictions by serving a crafted HTML page to a victim. The CVSS 3.1 score is 4.3 (Medium) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/...
CVE-2026-79017
A race condition in the Extensions component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to bypass system access restrictions via a crafted Chrome extension. The Chromium security team rates it Low severity; CVSS 3.1 scores it 6.5 (Medium) with high integrity impact but no co...
CVE-2026-79017
Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Low...
EUVD-2026-66072
Information leak in XR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...