V8 JavaScript DoS

The V8 JavaScript script handler vulnerability in Google Chrome and Microsoft Edge web browsers is related to a lack of data security mechanisms. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...

Google Chrome Microsoft Edge Data Compromise

The vulnerability in the Parser component of Google Chrome and Microsoft Edge web browsers is related to a lack of proper data security mechanisms. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

Network Component Compromise Data Compromise

The vulnerability in the Network component of Google Chrome and Microsoft Edge web browsers is related to a lack of proper data security mechanisms. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

USB Component DoS

The vulnerability in the USB components of Google Chrome and Microsoft Edge is related to a lack of proper data security mechanisms. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service by using a specially crafted HTML page...

Chromoting Remote Administration DoS

The vulnerability of the Chromoting remote administration tool for Google Chrome and Microsoft Edge lies in the lack of data protection mechanisms. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Sandbox DoS

The vulnerability of the Sandbox component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Blink Component Data Compromise

The vulnerability of the Blink component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of Google Lens components in Google Chrome and Microsoft Edge browsers is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially created HTML page...

Security Component Access Confidential Data Compromise

The vulnerability of the Security component in Firefox web browsers, Firefox ESR, and the email client Thunderbird is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise data integrity...

Linux Ethernet Driver Compromise

The vulnerabilities in the drivers/net/ethernet/microchip/lan966x/lan966xethtool.c, drivers/net/thernet/microchip/lan966x/lan966xmain.c, and drivers/net/thernet/microchip/lan966x/lan966xvcapimpl.c files of the Linux kernel’s Ethernet network adapter drivers are related to improper resource lockin...

HaE HaEFile-1.0.3

Empower ethical hacker for efficient operations. Network version: overspace-labs/HaENet File version: overspace-labs/HaEFile README Version: English | 简体中文 Project Introduction HaE is a framework-style project in the field of cybersecurity data security , adopting a Lego brick-style modular desig...

MINI-6VGX-C24M-5JJG

Bulletin has no description...

EUVD-2026-54229

diboot-core's POST /common/load-related-data endpoint resolves caller-supplied field names to any @TableField column of any entity and returns those values for all rows, with no field or entity allowlist. The only guard, relatedDataSecurityCheck, returns true unconditionally, so any authenticated...

ServiceWorker Confidential Data Access

The vulnerability of the ServiceWorker interface in Google Chrome and Microsoft Edge is related to the lack of data protection mechanisms. Exploiting this vulnerability allows a malicious actor to gain access to confidential data through a specially created HTML page...

HaE HaEFile-1.0.2

Empower ethical hacker for efficient operations. Network version: overspace-labs/HaENet File version: overspace-labs/HaEFile README Version: English | 简体中文 Project Introduction HaE is a framework-style project in the field of cybersecurity data security , adopting a Lego brick-style modular desig...

Security of World-Model-Based Embodied AI: A Lifecycle of Threats, Defenses, and Evaluation

World models give embodied AI a predictive core: they compress observations into states, simulate action-conditioned futures, and enable planning beyond reactive control. This predictive layer, however, opens a new security boundary-compromise can propagate from data, sensors, prompts, or feedbac...

CVE-2026-13268

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2026-60321

Vulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite component: PJM Command Center. The supported version that is affected is V16. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Project Manufacturing...

CVE-2026-55082 DHIS2 SQL injection in SQL View filter values

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. DHIS2 SQL View data endpoints allowed authenticated users with SQL View access to provide crafted filter values that were interpolated into generated SQL. An authenticated user with acces...

PT-2026-62327

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...