244 matches found
PT-2026-106985
Missing authorization in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Low...
PT-2026-106936
Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-106263: Improper Input Validation
Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-102576 Quay: quay: dom-based cross-site scripting via unvalidated redirect_url on signin page
A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulting in cross-site scripting XSS. Because the application does not validate the redirect destination before navigating, this flaw allows the execution of arbitrary script in the context of...
CVE-2026-102576
A domain-based cross-site scripting (XSS) vulnerability exists in Quay due to an unvalidated redirect_url on the sign-in page. A remote attacker can craft a malicious link to trick a user into logging in; because the application fails to validate the redirect destination, arbitrary scripts can be...
CVE-2026-102576 Quay: quay: dom-based cross-site scripting via unvalidated redirect_url on signin page
A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulting in cross-site scripting XSS. Because the application does not validate the redirect destination before navigating, this flaw allows the execution of arbitrary script in the context of...
Astra Linux – Vulnerability in Chromium
The information leak in the SignIn process of Google Chrome before version 152.0.7977.65 allowed a remote attacker to obtain sensitive information through crafted network traffic. Chromium security severity: Medium...
CVE-2023-31719
CVE-2023-31719 JSON 매개변수 "username"에 SQL 코드를 주입하는 것이 가능하며, 이는 /api/signin 엔드포인트로 HTTP POST 요청을 통해 이루어집니다. "username":"test' OR 2891=LIKECHAR65,66,67,68,69,70,71,UPPERHEXRANDOMBLOB500000000/2-- ZJMj","password":"test" 영향받는 제품명: FUXA 영향받는 버전: = 1.1.12 문제: SQL Injection 설명: JSON 매개변수 "username"에 SQL...
CVE-2026-79122
A flaw was found in Google Chrome. A remote attacker could exploit an information leak vulnerability in the SignIn component by sending crafted network traffic. This could allow the attacker to obtain sensitive information...
ROS-20260915-73-0186
The vulnerability of the SignIn component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...
Astra Linux – Vulnerability in Chromium
In the Sign-In Flow of Google Chrome, before version 104.0.5112.101 was released, remote attackers could potentially exploit heap corruption through specific UI interactions...
The vulnerability of the SignIn component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the SignIn component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...
Chromium: CVE-2026-79122 Information leak in SignIn
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
SUSE CVE-2026-79122
Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
Linux Distros Unpatched Vulnerability : CVE-2026-79122
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromi...
CVE-2026-79122
Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
DEBIAN-CVE-2026-79122
Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-79122
Information leak in SignIn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
