174527 matches found
CVE-2026-86975
Apple addresses an out-of-bounds read vulnerability in multiple operating systems, including iOS 27 , iPadOS 27 , macOS Golden Gate 27 , tvOS 27 , visionOS 27 , and watchOS 27 . The root cause stems from insufficient bounds checking, where processing a maliciously crafted image may result in unex...
CVE-2025-60494
The GPAC Project/MP4Box software versions before 2.5 is vulnerable to a segmentation violation within the gf_props_equal_internal function located in /filter_core/filter_props.c. An attacker can trigger a Denial of Service (DoS) by supplying a crafted data file . No specific exploit links or reme...
PT-2026-118727
Improper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
PT-2026-118854
Information leak in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
PT-2026-118946
Improper input validation in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-118799
Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-118754
Improper access control in ComputePressure in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
PT-2026-118796
Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-
Poc for CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- Usage: 1-press share button and make screenshot 2-with ftp go to path:/user/avcontents/photo/NPXS20001/NPXS20001/XXX/ you will find screenshot that you make. 3-copy it to pc and run it with makepng.py it will output poc.png 4-rename i...
CVE-2026-20841
🛡️ CVE-2026-20841 - Windows Notepad Security Test Tool ⚠️ What is CVE-2026-20841? CVE-2026-20841 is a known security weakness in the Windows Notepad application. It affects the markdown feature, which lets Notepad display formatted text with clickable links. This weakness happens because the...
CVE-2017-13286
CVE-2017-13286 CVE-2017-13286 Poccannot use All resources are sourced from this article https://bbs.kanxue.com/thread-268506.htm The main cause of this vulnerability is the inconsistency between reading and writing of Parcel objects. It can be traced back to the following code public void...
CVE-2021-41074
CVE-2021-41074 CSRF in Qloapps HotelCommerce 1.5.1 There is a CSRF in HotelCommerce 1.5.1. It can allow anyone to change the admin email. If an attacker gets an admin to click a maliciously crafted html document, they can change the admin user email...
CVE-2024-21413
CVE-2024-21413 Obtaining Login Credentials Using CVE-2024-21413 Vulnerability First of all, hello. Using a vulnerability in Microsoft Outlook, you can perform the following steps to obtain Windows user credentials. I use the class.phpmailer.php library via PHP to send the email. You need to open...
CVE-2026-46529
RCE via PDF argv injection CVE-2026-46529 atril/xreader/evince Working proof-of-concept for the argv injection in evspawn shell/ev-application.c. A single click anywhere on the rendered page of a crafted PDF triggers arbitrary code execution as the user running the viewer. This release uses the...
CVE-2023-44813
CVE-2023-44813 A reflected cross-site scripting XSS vulnerability in the mode parameter on Invite Friend function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. Vulerable Parameter: mode Exploit - Proof of Concept POC...
CVE-2014-0196
See https://vulners.com/cve/CVE-2014-0196...
CVE-2026-14511
IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications...
EUVD-2026-104477
IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications...
CVE-2026-14511
IBM MQ versions 9.4.5.0 through 9.4.5.1 CD are vulnerable to a denial of service (DoS) issue. An authenticated user can trigger a crash in consuming applications by sending a specially crafted message. The root cause is identified as CWE-770: Allocation of Resources Without Limits or Throttling ....
