The vulnerability of the platform for creating individual web applications in CRM. The leader involved in this issue faces unlimited distribution of resources, allowing attackers to compromise the accessibility of protected information.

The vulnerability of the platform for creating individual web applications in CRM involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

neo

Neo Turn any web app into an API. No official API needed. No browser automation. Neo is a Chrome extension that passively captures every API call your browser makes, learns the patterns, and lets AI or you replay them directly. The Problem AI agents operating web apps today have two options, both...

WordPress Accessibility Helper <0.6.0.7 - Cross-Site Scripting

WordPress Accessibility Helper plugin before 0.6.0.7 contains a cross-site scripting vulnerability. It does not sanitize and escape the wahi parameter before outputting back its base64 decode value in the page. id: CVE-2022-0150 info: name: WordPress Accessibility Helper 0.6.0.7 - Cross-Site...

CVE-2022-26726-POC

CVE-2022-26726 Affected Versions As a student, I have limited access to devices in which I can test this vulnerability. The versions I have tested so far are MacOS 12.3.1, MacOS 12.3, MacOS 12.0, MacOS 10.15.7, and MacOS 11.6.1. The vulnerability works on all the versions tested on. So what is th...

CVE-2026-2413

CVE-2026-2413 Ally – Web Accessibility & Usability = 4.0.3 - Unauthenticated SQL Injection via URL Path Description The Ally – Web Accessibility & Usability plugin for WordPress is vulnerable to SQL Injection via the URL path in all versions up to, and including, 4.0.3. This is due to insufficien...

CVE-2026-87562

Incorrect reference resolution in Accessibility in Google Chrome on on...

CVE-2026-2413-POC

CVE-2026-2413-POC The Ally – Web Accessibility & Usability plugin for WordPress is vulnerable to SQL Injection via the URL path in all versions up to, and including, 4.0.3. This is due to insufficient escaping on the user-supplied URL parameter in the getglobalremediations method, where it is...

CVE-2026-87562

Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-87562

Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74355

Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87562

Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87562

CVE-2026-87562 is a medium-severity vulnerability in the Accessibility component of Google Chrome on Mac , affecting versions prior to 153.0.8010.36 . The root cause is incorrect reference resolution , which allows a remote attacker to potentially spoof UI elements by serving a crafted HTML page....

PT-2026-88662

Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

The vulnerability of the mxuport_calc_num_ports() function in the drivers/usb/serial/mxuport.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mxuportcalcnumports function in the drivers/usb/serial/mxuport.c module of the Linux device driver framework is related to the copying of buffers without checking input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

The vulnerability of the vcn_v2_5_dec_ring_set_wptr() function in the drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c driver for AMD GPU cores in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the vcnv25decringsetwptr function in the drivers/gpu/drm/amd/amdgpu/vcnv25.c driver for AMD GPU cores in Linux operating systems is related to improper checking of the specified data type. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the espintcp_sendmsg() function in the net/xfrm/espintcp.c module, which is part of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the espintcpsendmsg function in the net/xfrm/espintcp.c module, which implements networking functions in the Linux kernel, relates to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the bpf_jit_prog_releaseother() function in the kernel/bpf/core.c module, which supports the BPF interpreter for Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the bpfjitprogreleaseother function in the kernel/bpf/core.c module, which supports the BPF interpreter for Linux kernels, relates to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the fastrpc_get_args() function in the drivers/misc/fastrpc.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fastrpcgetargs function in the drivers/misc/fastrpc.c module of the Linux kernel is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Vulnerability of the functions xe_gem_prime_import() and xe_dma_buf_init_obj() in the drivers/gpu/drm/xe/xe_dma_buf.c module of the Linux kernel, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions xegemprimeimport and xedmabufinitobj in the drivers/gpu/drm/xe/xedmabuf.c module of the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the um_tlb_sync() function in the arch/um/kernel/tlb.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the umtlbsync function in the arch/um/kernel/tlb.c module of the Linux operating system is related to the lack of lock checking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...