Lucene search
+L

1135213 matches found

SUSE CVE
SUSE CVE
added 2026/09/02 11:29 a.m.10 views

SUSE CVE-2026-84324

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

9CVSS6.2AI score0.00292EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/09/02 11:29 a.m.9 views

SUSE CVE-2026-84326

Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.2AI score0.00275EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/09/02 11:29 a.m.9 views

SUSE CVE-2026-84333

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

9.6CVSS6.2AI score0.00249EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/09/02 11:29 a.m.8 views

SUSE CVE-2026-84334

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

8.1CVSS6.2AI score0.00085EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/09/02 11:29 a.m.10 views

SUSE CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS6.2AI score0.00319EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/09/02 11:29 a.m.10 views

SUSE CVE-2026-84349

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.3CVSS6.2AI score0.00246EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/09/02 11:29 a.m.9 views

SUSE CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...

8.8CVSS6.2AI score0.00223EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/09/02 11:29 a.m.9 views

SUSE CVE-2026-84351

Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.3CVSS6.2AI score0.00276EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/09/02 11:29 a.m.9 views

SUSE CVE-2026-84352

Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

9.6CVSS6.2AI score0.00277EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/09/02 11:29 a.m.9 views

SUSE CVE-2026-84354

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

9.6CVSS6.2AI score0.00271EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/09/02 11:18 a.m.12 views

Malicious code in daisypick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9bd46c99a0d58d9ded0faca080e42efa9015c9bd213c46292e82644117d53ae The package presents itself as a Tailwind CSS color/service-worker helper, but the daisypick/plugin export reads a URL from...

6AI score
SaveExploits0References5
OSV
OSV
added 2026/09/02 11:18 a.m.9 views

MAL-2026-15835 Malicious code in daisypick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9bd46c99a0d58d9ded0faca080e42efa9015c9bd213c46292e82644117d53ae The package presents itself as a Tailwind CSS color/service-worker helper, but the daisypick/plugin export reads a URL from...

6.1AI score
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/09/02 11:17 a.m.9 views

Malicious code in tailwind-theme-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3a6ff1f2699ab0ea92a30416c4b043d70781bd4c7241c2fb497061a78866ab7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.6AI score
SaveExploits0References8
OSV
OSV
added 2026/09/02 11:17 a.m.10 views

MAL-2026-15846 Malicious code in tailwind-theme-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3a6ff1f2699ab0ea92a30416c4b043d70781bd4c7241c2fb497061a78866ab7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.7AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/02 11:17 a.m.8 views

CVE-2026-29053

This is a rework of the Repo by rootxran for this same CVE - https://github.com/rootxran/CVE-2026-29053 During testing against specific Ghost CMS environments, the original theme payload triggered a Fatal Handlebars Error. The CMS failed to activate the malicious theme because it referenced a...

9.8CVSS5.8AI score0.03579EPSS
SaveExploits5References1
NVD
NVD
added 2026/09/02 11:17 a.m.7 views

CVE-2026-32773

There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a malicious Spark job to generate arbitrary unescaped frontend code which could lead to a minimal privilege escalation in browser. Users are encouraged to upgrade to Spark 3.5.8 or later. This CVE is marked as...

6.1CVSS0.00258EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/02 11:17 a.m.8 views

CVE-2026-19219

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to,...

8.1CVSS0.00157EPSS
SaveExploits0References1
Malwarebytes
Malwarebytes
added 2026/09/02 11:15 a.m.7 views

Two critical Chrome flaws put users at risk on malicious websites

Update September 4, 2026 Shortly after this article was published, Google released another Chrome update that patches an actively exploited flaw in the V8 JavaScript engine, tracked as CVE-2026-85046. Google rates the vulnerability as high severity and says an exploit already exists in the wild. ...

9.6CVSS7.5AI score0.01162EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:13 a.m.6 views

PoC-CVE-2026-1357

PoC CVE-2026-1357: WPvivid Backup & Migration The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process...

9.8CVSS8.4AI score0.32714EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/02 11:04 a.m.10 views

CVE-2026-10170-RCE

Visitor Management System 1.0 - SQLi to Remote Code Execution Attack Chain Vulnerability Information...

6.5CVSS6.8AI score0.00244EPSS
SaveExploits0
Rows per page
Query Builder