57272 matches found
firefox: thunderbird: Use-after-free in the DOM: Navigation component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Navigation component...
CVE-2026-57827
CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE Split-Controller Upload Bypass → Direct Write Task → /downloads/shell.php → RCE Overview CVE-2026-57827 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in RSFiles! comrsfiles, a widely...
CVE-2022-21661-Demo
This repository demonstrates a vulnerability in WordPress 5.8.2, in which missing sanitization in class-wp-tax-query.php can, in very specific situations, allow attackers to perform SQL injection. Note that successful exploitation requires developers to add vulnerable code to the WordPress...
CVE-2025-2135
CVE-2025-2135...
CVE-2020-17527-Tomcat
CVE-2020-17527-Tomcat...
CVE-2025-70545
PPC Belden ONT 2K05X router Author : Jeyabalaji Affected Product Code Base: PPC 2K05X Router - V1.1.9206L Tested on : Windows 11 CVE : CVE-2025-70545 Description: A stored cross-site scripting XSS vulnerability exists in the web management interface of the PPC Belden ONT 2K05X router running...
CVE-2018-10388
This repository does not have a README...
CVE-2017-0108
The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to execute arbitrary code v...
CVE-2025-55182-GodzillaMemoryShell
This repository does not have a README...
CVE-2026-29971
CVE-2026-29971 An attacker can execute arbitrary JavaScript in the victim's browser, potentially leading to session hijacking or privilege escalation. CVE-2026-29971 Vulnerability Reflected Cross-Site Scripting XSS Affected Product WebFileSys Affected Version 2.31.1 Description A reflected...
Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection
SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request. id: CVE-2018-6605 info: name: Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection author: DhiyaneshDk severity...
CLEANSTART-2026-WM37561 Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL
Security vulnerability affects the nfs-subdir-external-provisioner package. The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL...
Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130368)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130368 advisory. Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. Tenable has...
Unity Linux 20.1070e Security Update: firefox (UTSA-2026-130347)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130347 advisory. Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15,...
CVE-2026-109705
Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109726
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109729
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109751
Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...