39558 matches found
CVE-2026-97331 User Private Files < 2.1.9 - Subscriber+ User Email Address Disclosure via dpk_upvf_rmv_access
The User Private Files WordPress plugin before 2.1.9 does not validate that a supplied user belongs to the document being operated on before returning that user's email address, allowing any authenticated user, such as a Subscriber, to obtain the email address of any registered account, including...
CVE-2026-97331
The User Private Files WordPress plugin, in versions before 2.1.9 , is vulnerable to a subscriber-level user email address disclosure. The flaw exists because the plugin fails to validate that a supplied user actually belongs to the document being operated on before returning that user's email ad...
EUVD-2026-94191
The User Private Files WordPress plugin before 2.1.9 does not validate that a supplied user belongs to the document being operated on before returning that user's email address, allowing any authenticated user, such as a Subscriber, to obtain the email address of any registered account, including...
CVE-2025-65300
CVE-2025-65300 विवरण CVE-2025-65300: Coohom SaaS प्लेटफ़ॉर्म में संग्रहीत क्रॉस-साइट स्क्रिप्टिंग XSS भेद्यता प्रकटीकरण तिथि: 2025-10-28 अंतिम अद्यतन: 2025-10-28 रिपोर्टकर्ता: Phisit Pupiw विक्रेता: Coohom CWE: CWE-79 – क्रॉस-साइट स्क्रिप्टिंग सारांश Coohom SaaS प्लेटफ़ॉर्म के अंतर्गत खाता सेटिंग...
Western Digital MyCloud NAS - Authentication Bypass
It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a password, thereby gaining full control of the...
vLLM 0.8.3 < 0.14.1 Information Disclosure (GHSA-4r2x-xpjr-7cvv)
The version of the vLLM Python package installed on the remote host is 0.8.3 prior to 0.14.1. It is, therefore, affected by an information disclosure vulnerability. When an invalid image is sent to the vLLM multimodal endpoint, PIL throws an error that vLLM returns to the client, leaking a heap...
Linux Distros Unpatched Vulnerability : CVE-2026-106209
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof address bar vi...
Linux Distros Unpatched Vulnerability : CVE-2026-106246
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium...
Linux Distros Unpatched Vulnerability : CVE-2026-106317
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-106338
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML...
Linux Distros Unpatched Vulnerability : CVE-2026-106226
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof...
ip-obfuscation
IP Obfuscator अस्पष्ट IP पतों और URL को उत्पन्न करने के लिए एक सुरक्षा परीक्षण टूलकिट। पेनिट्रेशन टेस्टिंग, सुरक्षा अनुसंधान, फ़िशिंग जागरूकता प्रशिक्षण, और URL पार्सर/फ़िल्टर के परीक्षण के लिए उपयोगी। अवलोकन यह टूलकिट दो इंटरफ़ेस प्रदान करता है: ipobfuscator.html - इंटरैक्टिव उपयोग के लिए...
CVE-2026-102161
An unauthenticated attacker located on an adjacent private network or any attacker routed through a reverse proxy/load balancer that forwards client headers can forge their source IP address and gain administrative session privileges on the CV-CUE backend...
EUVD-2026-93958
An unauthenticated attacker located on an adjacent private network or any attacker routed through a reverse proxy/load balancer that forwards client headers can forge their source IP address and gain administrative session privileges on the CV-CUE backend...
CVE-2026-101027 Gitea migration SSRF through ALLOWED_DOMAINS address check bypass
When migrations ALLOWEDDOMAINS was configured, a hostname matching the allow list was accepted without checking its resolved address against the local-network restrictions. A user who can start repository migrations and control the DNS of an allowed hostname could make it resolve to loopback or...
CVE-2026-106338
UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-106338
UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106317
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-106317
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...