CVE-2026-102830

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5.11 and 4.6.4, and in JupyterLite Core 0.8.3 and earlier, the Plural-Forms header in a selected third-party language pack can append...

CVE-2026-102826

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 4.0.0, the default blockUnsafeOperationsPlugin does not completely reject configuration includes supplied through customArgs to git.clone. The...

CVE-2026-102830

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5.11 and 4.6.4, and in JupyterLite Core 0.8.3 and earlier, the Plural-Forms header in a selected third-party language pack can append...

CVE-2026-95319

A flaw was found in chromium-browser. A use-after-free memory corruption flaw in the printing component allows a remote attacker who has already compromised the renderer process to escape the browser sandbox and potentially execute arbitrary code on the host system. To exploit this vulnerability,...

CVE-2026-95298

A flaw was found in chromium-browser. A use-after-free vulnerability, where memory is improperly accessed after being released, exists within the browser process. A local attacker can exploit this flaw through specific user interface UI interactions to potentially execute arbitrary code outside t...

CVE-2026-95286

A flaw was found in chromium-browser. A type confusion vulnerability—where data is processed using an incompatible data type—exists in the browser's Bindings component. A remote attacker can exploit this flaw by enticing a user to view a specially crafted HTML page, leading to arbitrary code...

CVE-2026-97475

A flaw was found in the Linux kernel's Tegra SOCTHERM driver. When the driver is removed, registered cooling devices are not unregistered from the thermal framework, leaving stale references to memory that has already been released. This leads to a use-after-free vulnerability, where the system...

CVE-2026-95365

A flaw was found in chromium-browser. A type confusion vulnerability in the IndexedDB component allows a remote attacker to execute arbitrary code within the browser sandbox. To exploit this flaw, an attacker must convince a user to open a specially crafted HTML page...

CVE-2026-95356

A flaw was found in chromium-browser. A use-after-free memory vulnerability in the WindowDialog component allows a remote attacker to execute arbitrary code outside the browser sandbox. By convincing a user to open a specially crafted HTML page, an attacker can exploit this flaw to compromise the...

CVE-2026-95343

A flaw was found in chromium-browser. A remote attacker could exploit a use-after-free memory vulnerability—where previously released memory is improperly accessed—in the WebAudio component by convincing a user to view a specially crafted HTML page. Successful exploitation could allow the attacke...

CVE-2026-95335

A flaw was found in chromium-browser. A use-after-free vulnerability in the Human Interface Device HID component allows a remote attacker to execute arbitrary code outside the browser sandbox. By convincing a user to visit a specially crafted web page, an attacker who has already compromised the...

CVE-2026-95325

A flaw was found in the ANGLE component of chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code outside the sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from a use-after-free condition, which occurs when memory is referenc...

CVE-2026-95322

A flaw was found in chromium-browser. An out-of-bounds write vulnerability in the graphics processing unit GPU component allows a remote attacker to execute arbitrary code outside the browser sandbox. By enticing a user to view a specially crafted HTML page, an attacker who has already compromise...

CVE-2026-95299

A flaw was found in chromium-browser. A use-after-free memory corruption vulnerability exists within the Graphics Processing Unit GPU component. A remote attacker could exploit this flaw by enticing a user to visit a specially crafted web page. Successful exploitation could allow the attacker to...

CVE-2026-95283

A flaw was found in the Tint component of chromium-browser. This buffer overflow allows a remote attacker to execute arbitrary code outside the browser sandbox by convincing a user to view a specially crafted web page. Successful exploitation could compromise the host system by bypassing standard...

CVE-2018-16763

CVE-2018-16763 CVE-2018-16763 FuelCMS 1.4 Ejecución Remota de Código, esta versión de FuelCMS sigue siendo vulnerable hasta ahora...

CVE-2019-18935

CVE-2019-18935 Exploit de prueba de concepto para una vulnerabilidad de deserialización JSON en .NET en Telerik UI para ASP.NET AJAX que permite la ejecución remota de código. Descripción Telerik UI para ASP.NET AJAX es un conjunto ampliamente utilizado de componentes de interfaz de usuario para...

CVE-2021-46422

CVE-2021-46422 SDT-CW3B1 1.1.0 - Inyección de comandos del sistema operativo Exploit Title: SDT-CW3B1 1.1.0 - OS Command Injection Vendor Homepage: http://telesquare.co.kr/ CVE : CVE-2021-46422 CVE Description: Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that...

CVE-2009-0182

VUPlayer 2.49 Desbordamiento de búfer local para ejecución arbitraria de código Versión del programa: VUPlayer 2.49 Vulnerabilidad: desbordamiento de búfer local al importar un archivo de lista de reproducción .wax que conduce a la ejecución arbitraria de código Explotación: Desbordamiento de búf...

CVE-2021-39273-CVE-2021-39274

CVE-2021-39273 En XeroSecurity Sn1per 9.0 versión gratuita, se establecen permisos inseguros 0777 al ejecutar la aplicación, lo que permite a un usuario sin privilegios modificar la aplicación, los módulos y los archivos de configuración. Esto conduce a la ejecución arbitraria de código con...