PT-2026-107118

Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description Critical infrastructure settings, specifically the Redis host addresses used by the core application, the ZeroMQ plugin, and the SimpleBackgroundJobs plugin, are exposed through the web UI and A...

Debian dsa-6545 : roundcube - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6545 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6545-1 [email protected] https://www.debian.org/security/...

SUSE SLES15 Security Update : rubygem-rails-html-sanitizer (SUSE-SU-2026:4445-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4445-1 advisory. This update for rubygem-rails-html-sanitizer fixes the following issue: - CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when t...

RHCOS 4 : Red Hat build of MicroShift 4.21.36 (RHSA-2026:74796)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74796 advisory. - encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 - mime: golang:...

Fedora 43 : chromium (2026-cd4e714c4e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cd4e714c4e advisory. Update to 154.0.8037.92 CVE-2026-102299: Type confusion in V8 CVE-2026-102300: Uninitialized resource in WebGPU CVE-2026-102301: Out of bounds write...

PT-2026-106891

Cross-site request forgery in ReadingList in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106910

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak in Permissions allows a remote attacker to bypass site isolation, which is a security mechanism that ensures web pages from different sites are processed in separate...

PT-2026-107075

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Accessibility component allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site...

PT-2026-107041

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the Translate feature allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is...

PT-2026-106944

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in Workers allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted PDF file. Site isolation is a security...

PT-2026-107097

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the BrowserTag component allows a remote attacker to bypass site isolation. This occurs when an attacker has already compromised the renderer process and uses...

PT-2026-106874

Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially bypass site isolation via a crafted HTML page. Chromium security severity: Low...

PT-2026-106880

Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106940

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the Network component allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is...

GHSA-238P-PMPM-9MQ7 KaTeX: Existing prototype pollution can bypass trust restrictions

Impact KaTeX can act as a read-side prototype pollution gadget in applications where Object.prototype has already been polluted, or where an attacker can influence the prototype of the renderer options object. KaTeX does not enable said prototype pollution. This advisory applies when combining...

CVE-2021-39476

CVE-2021-39476 发现 PhoenixCart 1.0.8.0 中存在多个 XSS 漏洞 同一页面上的 2 个 XSS 漏洞 "编辑分类标题以用于 SEO：" "编辑分类描述" 链接：https://www.warcloudsecurity.com/ecommerce/index.php?cPath=1...

CVE-2024-23998

PoC de Another Redis Desktop Manager Una prueba de concepto para la vulnerabilidad CVE-2024-23998. 1. Resumen de la vulnerabilidad: Tema de la vulnerabilidad: Ejecución local de código mediante XSS Versión vulnerable: = 1.6.6 Tipo de ataque: Ejecución remota de código Vectores de ataque: Para...

CVE-2022-3992

CVE-2022-3992 Cross-Site Scripting en WonderCMS Descripción: Una vulnerabilidad de cross-site scripting XSS en Sanitization Management System v1.0 permite a posibles atacantes subir archivos arbitrarios mediante un nombre manipulado en los campos del logotipo del sistema de los campos de...

CVE-2021-32644

CVE-2021-32644 该漏洞是影响 Ampache 4.4.3 之前版本的 XSS 漏洞。 https://nvd.nist.gov/vuln/detail/CVE-2021-32644 安装及运行步骤 1. Ampache 安装 进行安装时，请先在 docker-compose.yml 文件中配置端口转发。 当前安装的 Ampache 版本为 4.4.2。 $docker-compose up 2. 访问 Amapache 转到 http://web-server ip:port/ 2. 访问 Amapache 并配置 MySQL 转到 http://web-server...

CVE-2019-8331

Eng Descripción CVE-2019-8331 es una vulnerabilidad de seguridad de tipo Cross-Site Scripting XSS encontrada en Bootstrap, una biblioteca JavaScript ampliamente utilizada en el desarrollo de sitios web y aplicaciones móviles. Esta vulnerabilidad se debe a que Bootstrap no filtra adecuadamente los...