CVE-2026-65098

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

CVE-2025-55182-Terminal

Scanner de Vulnerabilidade RSC do Next.js CVE-2025-66478 / CVE-2025-55182 Uma ferramenta leve e multithread de Prova de Conceito PoC projetada para detectar e demonstrar a vulnerabilidade de Execução Remota de Código nos React Server Components RSC do Next.js React2Shell. Esta ferramenta permite...

CVE-2023-0297

CVE-2023-0297 Nicht authentifizierte Remote-Codeausführung in PyLoad 0.5.0b3.dev31 HAFTUNGSAUSSCHLUSS: Dieses Skript dient der Überprüfung der Systemsicherheit. Verwenden Sie dieses Skript nur auf Ihren eigenen Systemen oder auf Systemen, für die Sie eine schriftliche Erlaubnis zum Ausnutzen...

sudo-chroot

Descrizione: Sudo precedente alla versione 1.9.17p1 consente agli utenti locali di ottenere l'accesso root perché /etc/nsswitch.conf da una directory controllata dall'utente viene usato con l'opzione --chroot. Sudo Local Privesc --chroot...

CVE-2026-80104 DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename

DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload directory. skillupload in packages/dbgpt-app/src/dbgptapp/openapi/apiv1/agenticdataapi.py takes file.filename as given and writes the request body to uploaddir / filename. A...

CVE-2026-77585

The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a command-line option by the underlying SSH process...

CVE-2026-45019

Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled set to true in .chainlit/config.toml expose the POST /mcp endpoint without requiring authentication. For sse and streamable-http...

CVE-2026-65105

NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

CVE-2026-65105

NVIDIA NemoClaw for Linux contains an unauthenticated access vulnerability in its inference server setup , allowing a remote attacker on an adjacent network to reach the inference service without credentials. A successful exploit can result in information disclosure and denial of service . The CV...

EUVD-2026-66095

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

CVE-2026-65098

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow that allows an attacker to cause weak authentication . A successful exploit could lead to code execution , information disclosure , and data tampering . The CVSS 3.1 score is 8.1 (HIGH) , with a network attack...

CVE-2026-65098

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

CVE-2026-79254

Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79254

Incorrect reference resolution in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79254

CVE-2026-79254 is an incorrect reference resolution vulnerability in the CustomTabs component of Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker can exploit it via a crafted HTML page to bypass system access restrictions. Chromium rates it Low severity; the CVSS 3.1 sc...

CVE-2026-79017

Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-79225

Incorrect authorization in Browser in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via UI Interaction. Chromium security severity: Low...

CVE-2026-79017

Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-79021

CVE-2026-79021 is a missing authorization flaw in the InterestGroups component of Google Chrome prior to 152.0.7977.65 . An attacker who has already compromised the renderer process can use a crafted PDF file to bypass system access restrictions . The flaw carries a Low Chromium severity and a CV...

CVE-2026-79105

Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...