CVE-2026-34768

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.0, and 41.0.0-beta.8, on Windows, app.setLoginItemSettingsopenAtLogin: true wrote the executable path to the Run registry key without quoting. If the app ...

GHSA-JFQG-HF23-QPW2 Electron: Context Isolation bypass via contextBridge VideoFrame transfer

Impact Apps that pass VideoFrame objects from the WebCodecs API across the contextBridge are vulnerable to a context isolation bypass. An attacker who can execute JavaScript in the main world for example, via XSS can use a bridged VideoFrame to gain access to the isolated world, including any...

CVE-2025-29093

File Upload vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbitrary code via the Content/Gallery/Images component...

Motivian Content Mangment System 安全漏洞

Motivian Content Mangment System is a content management system from Motivian, Inc. A security vulnerability exists in Motivian Content Mangment System version v.41.0.0, which originates in the file upload feature and could lead to remote execution of arbitrary code...

Motivian Content Mangment System 安全漏洞

Motivian Content Mangment System is a content management system from Motivian, Inc. A security vulnerability exists in Motivian Content Mangment System version v.41.0.0, which stems from a cross-site scripting vulnerability that could lead to remote execution of arbitrary code...

📄 Motivian Content Management System 41.0.0 Cross Site Scripting

Motivian Content Management System version 41.0.0 suffers from multiple cross site scripting vulnerabilities. CVE-2025-29094-Multiple-Stored-Cross-Site-Scripting-XSS This repository reveals a security vulnerability discovered in Motivian Content Management System v.41.0.0. - CVE-2025-29094:...

changed-files Security Vulnerabilities

changed-files is used to keep track of the relative paths returned from the project root for all changed files and directories associated with the target branch, previous commits, or the last remote commit. A security vulnerability exists in changed-files versions prior to 41.0.0, which stems fro...