CVE-2026-118337

A high-severity improper access control vulnerability exists in the Forms component of Google Chrome (prior to version 156.0.8078.73 ). A remote attacker can bypass the web origin policy by tricking a user into visiting a crafted HTML page. This vulnerability is tracked in Chromium and affects va...

CVE-2026-118318

Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-118318

Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-118318

A remote attacker can read memory in Google Chrome via a crafted HTML page due to improper access control in the V8 engine. This vulnerability affects versions prior to 156.0.8078.73 . The Chromium security severity is rated as High . For the Debian stable distribution (trixie), the issue is fixe...

Malware in agentenact

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

convoC2

convoC2 Table of Contents Introduction Demo Usage Requirements Inspiration Contribute Introduction Command and Control infrastructure that allows Red Teamers to execute system commands on compromised hosts through Microsoft Teams. It infiltrates data into hidden span tags in Microsoft Teams...

AndroRAT

Disclaimer : This software is meant for educational purposes only. I'm not responsible for any malicious use of the app. AndroRAT AndroRAT is a tool designed to give the control of the android system remotely and retrieve informations from it. Androrat is a client/server application developed in...

CVE-2026-118170

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document...

EUVD-2026-102102

Symfony: ReDoS in HeaderUtils::split Reachable Through the Cache-Control Request Header...

Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header

Description HeaderUtils::split parsed header values with a pattern whose token alternative also matched whitespace, followed by a ?!\s lookbehind. A run of whitespace placed before a separator could be divided among the iterations of the enclosing repetition in exponentially many ways, and the...

GHSA-R925-MGVR-H9CC Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header

Description HeaderUtils::split parsed header values with a pattern whose token alternative also matched whitespace, followed by a ?!\s lookbehind. A run of whitespace placed before a separator could be divided among the iterations of the enclosing repetition in exponentially many ways, and the...

CVE-2026-109089

A buffer overflow when handling DEVICERESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server...

CVE-2026-118170 CVE-2026-118170

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document...

CVE-2026-118170

The strapi/review-workflows package is subject to a broken access control vulnerability. The flaw allows unauthorized updates to be performed because the system fails to verify if the caller possesses the necessary update rights for the underlying document. Remediation information is referenced i...

CVE-2026-118170 CVE-2026-118170

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document...

EUVD-2026-111346

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document...

CVE-2026-118170

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document...

CVE-2026-104350

Adobe Campaign Classic ACC is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue...

EUVD-2026-111226

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL...

CVE-2026-104350

The software Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can exploit this by inducing a victim to visit a maliciously crafted URL or interact with a compromised web page to inject scripts. Successful exploitation could res...