CVE-2026-106185

Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93841

Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106346

Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106396

Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

Security Bulletin: IBM SPSS Modeler is affected by vulnerabilities in Eclipse Jetty

Summary IBM SPSS Modeler is affected by vulnerabilities in Eclipse Jetty. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-6790 DESCRIPTION: In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host a...

CVE-2026-31156

CVE-2026-31156 Il existe une vulnérabilité d'injection de chemin dans OpenPLC-v3, qui découle de l'absence de vérification de validité des paramètres de chemin de fichier transmis en ligne de commande. Les attaquants peuvent lire tout fichier lisible en construisant des chemins malveillants, ce q...

EUVD-2026-93780

Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-63697

Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-63697

Dell System Update (DSU) versions prior to 2.3.0.0 are affected by an Improper Certificate Validation vulnerability (CWE-295). A high-privileged attacker with remote access could exploit this flaw to achieve Remote execution . The vulnerability specifically affects the DSU tool, which corporate a...

dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-106114 ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions

ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared channel and grid dimensions before confirming that the profile contains the declared values. IccDataReader.ReadClutF32 can request a large float array, and...

CVE-2026-106114 ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions

ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared channel and grid dimensions before confirming that the profile contains the declared values. IccDataReader.ReadClutF32 can request a large float array, and...

CVE-2023-23924

CVE-2023-23924 Dompdf عرضة لفشل التحقق من صحة URI عند تحليل SVG · CVE-2023-23924 · GitHub Advisory Database https://github.com/advisories/GHSA-3cw5-7cxw-v5qg التشغيل Terminal 1 ❯ cd www ❯ php -S 127.0.0.1:9000 -t . Terminal 2 ❯ cd src ❯ php cve202323924.php التحقق تحقق من أن الأمر "whoami" يعمل...

CVE-2026-105867

Payload is a free and open source headless content management system. In @payloadcms/storage-s3 versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user can overwrite an existing S3 object belonging to another upload collection when client uploads are enabled for...

CVE-2026-12416-CVE-2026-12417

CVE-2026-12416-CVE-2026-12417 الاستيلاء على الحساب غير المصادق عليه عبر التحقق الضعيف من إعادة تعيين كلمة المرور عبر معامل 'resetuserid' | تصعيد الامتيازات غير المصادق عليه عبر التحقق الضعيف من إعادة تعيين كلمة المرور عبر 'resetactivationcode' المؤدي إلى الاستيلاء على الحساب CVE-2026-12417 &...

ECC_Attacks

Attaques connues sur la cryptographie à courbes elliptiques Introduction Introduction aux courbes elliptiques Les courbes elliptiques dans le contexte de la cryptographie Attaques ECC Attaques ECDH L'ordre du générateur est trop petit L'ordre du générateur est un nombre lisse L'ordre du générateu...

CVE-2024-34693

CVE-2024-34693: قراءة تعسفية للملفات من الخادم في Apache Superset ثغرة في التحقق غير السليم من المدخلات في Apache Superset، تسمح لمهاجم مُصادَق عليه بإنشاء اتصال MariaDB مع تمكين localinfile. من خلال تمكين localinfile في عميل MySQL/MariaDB الخاص بـ Superset وتوجيه العميل إلى خادم MySQL خبيث، قد ي...

CVE-2021-43798-Grafana-File-Read

Grafana-File-Read قراءة ملفات Grafana غير المصرح بها الإصدارات المتأثرة: 8.0.0-lastest المرجع: - https://github.com/tangxiaofeng7/Grafana-File-Read استغلال ثغرة عدم التحقق الصارم من توجيه URL في واجهة Grafana /public/plugins لقراءة أي ملف محلي من الخادم. poc:...

CVE-2026-106219

JetBrains TeamCity versions prior to 2026.2.1 are vulnerable to an information disclosure issue due to insufficient validation of Git submodule URLs . This flaw allows an attacker to perform unauthorized reading of local repositories hosted on the server. To remediate this vulnerability, users sh...

GHSA-2G7P-5934-Q4W7 Payload: ReDoS in Multipart Content-Type Validation

Impact A malformed multipart request body could take an extremely long time to finish. Patches Users should upgrade Payload packages to = 3.90.0 or = 4.0.0-canary.34...