53537 matches found
CVE-2024-5139
The Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for the injection of malicious JavaScript payloads. This vulnerability can be triggered by submitting crafted input to the Authentication Endpoint. Successful exploitation allows an attacker to redirect...
EUVD-2024-55810
The Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for the injection of malicious JavaScript payloads. This vulnerability can be triggered by submitting crafted input to the Authentication Endpoint. Successful exploitation allows an attacker to redirect...
CVE-2026-88784 Weglot < 6.4.3 - Unauthenticated Stored XSS via Translated Page Link Rewriting
The Translate WordPress with Weglot 2.0 WordPress plugin before 6.4.3 does not escape the URLs it re-inserts into a page when rewriting links for a translated language, and reverses the encoding that was applied to them beforehand, allowing unauthenticated users to store a payload which executes ...
Learn-SecByte-CTF-Labs-Collection-Windows-Kernel-Exploits-Client-Side-Browser-Attacks
Learn-SecByte-CTF-Labs-Collection-Windows-Kernel-Exploits-Clie...
CVE-2026-113221
A flaw was found in the Google Lens component of chromium-browser. This issue is caused by a use-after-free vulnerability, which occurs when memory is accessed after it has been released. A remote attacker could exploit this flaw by enticing a user to open a specially crafted HTML page, potential...
CVE-2026-113271
A flaw was found in the Accessibility component of Chromium. A remote attacker could exploit this vulnerability to execute arbitrary code by convincing a user to open a specially crafted HTML page. This issue occurs due to a use-after-free condition—where memory is improperly accessed after being...
CVE-2026-113019
A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser sandbox by convincing a user to open a specially crafted HTML page. This vulnerability is caused by a use-after-free condition in the Turbolev component, where the application references memory...
CVE-2026-113240
A flaw was found in the Chromecast component of Google Chrome. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, triggering a use-after-free condition where memory is accessed after being released. Successful exploitation could allow the...
CVE-2026-113079
A flaw was found in the SiteIsolation component of Chromium. A remote attacker could exploit this vulnerability by enticing a user to view a specially crafted HTML page, triggering a use-after-free memory error. Successful exploitation allows the attacker to execute arbitrary code within the...
CVE-2026-113200
An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/563350676...
CVE-2026-113071
A flaw was found in chromium-browser. A use-after-free vulnerability exists in the Notifications component, occurring when memory is accessed after it has already been freed. A remote attacker could exploit this flaw by enticing a user to visit a specially crafted HTML page, potentially leading t...
CVE-2026-113295
An out of bounds read flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568897206...
CVE-2026-113253
A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code inside the browser sandbox by enticing a user to visit a specially crafted HTML page. The vulnerability stems from a use-after-free issue—referencing memory after it has been released—within the...
CVE-2026-113001
A flaw was found in chromium-browser. A use-after-free vulnerability in the Workers component allows a remote attacker to execute arbitrary code inside the browser sandbox. To exploit this flaw, an attacker must trick a user into opening a specially crafted HTML page...
CVE-2026-113302
A flaw was found in chromium-browser. A remote attacker can exploit a use-after-free issue—where memory is accessed after it has been released—within the Extensions component by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute...
CVE-2026-113101
A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the sandbox environment by convincing a user to open a specially crafted HTML page. This vulnerability is due to a use-after-free condition in the SiteIsolation component, which occurs when memory is...
CVE-2026-113218
A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the sandbox by convincing a user to visit a specially crafted HTML page. This issue is caused by a use-after-free vulnerability within the DataTransfer component...
CVE-2026-113308
A flaw was found in Chromium. This flaw allows a remote attacker to achieve arbitrary code execution inside the browser sandbox by convincing a user to visit a crafted HTML page. The vulnerability is caused by a use-after-free condition—where memory is improperly accessed after being...
CVE-2026-113067
A flaw was found in the Chromoting component of Chromium. This vulnerability is caused by a use-after-free condition, where the application references memory after it has been released. A remote attacker could exploit this flaw by enticing a user to visit a specially crafted HTML page, leading to...