24177 matches found
CLEANSTART-2024-DB58731 Insufficient data validation in Dev Tools in Google Chrome prior to 101
Security vulnerability affects the chromium package. Insufficient data validation in Dev Tools in Google Chrome prior to 101...
CLEANSTART-2024-JJ45214 Use after free in Dev Tools in Google Chrome prior to 101
Security vulnerability affects the chromium package. Use after free in Dev Tools in Google Chrome prior to 101...
CVE-2026-19807 ByteCoreStack <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via wp_update_user_meta MCP Tool
The ByteCoreStack – MCP Connector for AI Tools plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.3 This is due to the wpupdateusermeta MCP tool in executetool gating writes solely with currentusercan'edituser', $uid — a check that WordPress core'...
CVE-2026-19807 ByteCoreStack <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via wp_update_user_meta MCP Tool
The ByteCoreStack – MCP Connector for AI Tools plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.3 This is due to the wpupdateusermeta MCP tool in executetool gating writes solely with currentusercan'edituser', $uid — a check that WordPress core'...
EUVD-2026-90548
The ByteCoreStack – MCP Connector for AI Tools plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.3 This is due to the wpupdateusermeta MCP tool in executetool gating writes solely with currentusercan'edituser', $uid — a check that WordPress core'...
CVE-2026-19807
The ByteCoreStack – MCP Connector for AI Tools WordPress plugin is vulnerable to Privilege Escalation in all versions up to and including 1.2.3 . The flaw exists in the wp_update_user_meta MCP tool within the execute_tool function, which improperly gates writes using current_user_can('edit_user',...
WordPress ByteCoreStack – MCP Connector for AI Tools plugin <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation vulnerability
Authenticated Subscriber+ Privilege Escalation vulnerability discovered by Décio Brandão in WordPress Plugin ByteCoreStack MCP Connector for AI Tools versions = 1.2.3...
CLEANSTART-2026-VW33526 protojson
Security vulnerability affects the cri-tools package. The protojson...
CLEANSTART-2026-FR88036 norm
Security vulnerability affects the cri-tools package. A norm...
CLEANSTART-2026-SN04687 NewNTUnicodeString does not check for string length overflow
Security vulnerability affects the cri-tools package. NewNTUnicodeString does not check for string length overflow...
CLEANSTART-2026-UC74382 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing
Security vulnerability affects the cri-tools package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CLEANSTART-2026-PN99410 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
Security vulnerability affects the cri-tools package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...
CLEANSTART-2026-DA69813 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree
Security vulnerability affects the cri-tools package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...
CLEANSTART-2026-OI09716 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree
Security vulnerability affects the cri-tools package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...
CLEANSTART-2026-YY41698 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Security vulnerability affects the cri-tools package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label...
CLEANSTART-2026-HP71482 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree
Security vulnerability affects the cri-tools package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...
CLEANSTART-2026-MJ25147 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree
Security vulnerability affects the cri-tools package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...
CLEANSTART-2026-WP33718 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service
Security vulnerability affects the cri-tools package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...