ReadyScript e-commerce management system Session Management

The vulnerability of the ReadyScript e-commerce management system is related to improper session management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

ReadyScript e-commerce management system Sequence Data Compromise

The vulnerability of the ReadyScript e-commerce management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

IAM Proxy Component Compromise Information Disclosure

The vulnerability of the IAM Proxy component of the Identity & Access Management tool in Platform V IAM is related to synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

CRM Platform Unlimited Resource Abuse

The vulnerability of the platform for creating individual web applications in CRM involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

REDAAM IT-infrastructure Management System Auth Bypass

The vulnerability of the “REDAAM” IT-infrastructure centralized management system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Test IT testing management system Default Login Credentials Compromise

The vulnerability of the Test IT testing management system is related to the use of default login credentials. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

WordPress Accessibility Helper <0.6.0.7 - Cross-Site Scripting

WordPress Accessibility Helper plugin before 0.6.0.7 contains a cross-site scripting vulnerability. It does not sanitize and escape the wahi parameter before outputting back its base64 decode value in the page. id: CVE-2022-0150 info: name: WordPress Accessibility Helper 0.6.0.7 - Cross-Site...

CVE-2022-26726-POC

CVE-2022-26726 Affected Versions As a student, I have limited access to devices in which I can test this vulnerability. The versions I have tested so far are MacOS 12.3.1, MacOS 12.3, MacOS 12.0, MacOS 10.15.7, and MacOS 11.6.1. The vulnerability works on all the versions tested on. So what is th...

CVE-2026-113317

An use after free flaw was found in the Accessibility component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/555337558...

Data Compromise Component Bypass Security

The Accessibility component vulnerability in Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability allows a remote attacker to bypass existing security mechanisms by using a specially crafted HTML page...

Google Chrome Code Execution

The Accessibility component vulnerability in Google Chrome is related to a buffer overflow in memory. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code via a specially crafted HTML page...

CLEANSTART-2024-AF52244 Use after free in PDF Accessibility in Google Chrome prior to 95

Security vulnerability affects the qt5-qtwebengine package. Use after free in PDF Accessibility in Google Chrome prior to 95...

CVE-2026-2413-POC

CVE-2026-2413-POC The Ally – Web Accessibility & Usability plugin for WordPress is vulnerable to SQL Injection via the URL path in all versions up to, and including, 4.0.3. This is due to insufficient escaping on the user-supplied URL parameter in the getglobalremediations method, where it is...

A Large-Scale Evaluation of Cookie Notice Privacy and Accessibility for Blind and Low Vision Users

We present the first large-scale privacy and accessibility evaluation of cookie notices across 2,061 domains for blind and low vision BLV users. Using a Playwright-based crawler, a custom NVDA screen reader add-on, and the Lighthouse and WAVE accessibility tools, we measure UK GDPR/PECR complianc...

CVE-2026-2413

CVE-2026-2413 Ally – Web Accessibility & Usability = 4.0.3 - Unauthenticated SQL Injection via URL Path Description The Ally – Web Accessibility & Usability plugin for WordPress is vulnerable to SQL Injection via the URL path in all versions up to, and including, 4.0.3. This is due to insufficien...

[SECURITY] Fedora 45 Update: accessibility-inspector-26.08.2-1.fc45

Accessibility Inspector is an inspector for your application accessibility tree. It lets you check all the items exposed via At-SPI, too...

OPENSUSE-SU-2026:22185-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: Chromium 156 156.0.8078.47 promoted to stable boo1286350: CVE-2026-113341: Memory corruption in Skia CVE-2026-113279: Memory corruption in Accessibility CVE-2026-113072: Memory corruption in CSS CVE-2026-113280: Memory...

ROS-20261026-73-0042

The multiple vulnerabilities in the openssh-2.9p2 package of the Red Hat Linux operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

ROS-20261026-73-0094

The vulnerability of the openssh package in the SUSE Linux Enterprise operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

ROS-20261026-73-0109

The multiple vulnerabilities in the openssh-askpass package of the OpenSUSE operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...