The vulnerability of Visual Studio Code’s source editor, related to the use of a name with an incorrect reference, allows attackers to gain unauthorized access to protected information.

The vulnerability of Visual Studio Code’s source editor is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker, working remotely, to gain unauthorized access to protected information...

The vulnerability of Visual Studio Code’s source editor, related to deficiencies in HTTP request processing, allows attackers to circumvent security restrictions.

The vulnerability of Visual Studio Code’s source editor is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability of Visual Studio Code’s source editor, related to the manipulation of intersite requests, allows a hacker to circumvent security restrictions.

The vulnerability of Visual Studio Code’s source editor is related to the manipulation of intersite requests. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability of Visual Studio Code’s source editor lies in its insufficient checking of unusual or exceptional states, allowing attackers to circumvent security restrictions.

The vulnerability of Visual Studio Code’s source editor is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

EUVD-2026-89336

simple-git: VISUAL editor environment variable is omitted from unsafe editor detection...

CVE-2026-72585-PoC

CVE-2026-72585 — Grafana: CVE-2026-21724의 불완전한 수정으로 Editor 역할이 보호된 contact point를 삭제할 수 있음 제품: Grafana Grafana Labs — 13.2.0까지 파일: pkg/services/ngalert/provisioning/contactpoints.go CWE: CWE-284 — 부적절한 접근 제어 CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N — 6.5 중간 CNA: Turan Security · CVE 기록 관련:...

CVE-2026-105678

Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. This issue is fixed in version 6.64.0...

CVE-2026-105692

The open-source design and prototyping platform Penpot contains an IDOR vulnerability in its delete-share-link RPC before version 2.18.0 . The application fails to verify if a caller is the creator of a share-link or possesses administrator authority, checking only if the caller can edit the pare...

CVE-2026-105678 Ghost: Editors Could Promote Staff Users to Their Own Role

Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. This issue is fixed in version 6.64.0...

CVE-2026-105678 Ghost: Editors Could Promote Staff Users to Their Own Role

Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. This issue is fixed in version 6.64.0...

CVE-2026-105678

The Ghost Node.js content management system is vulnerable to an improper privilege management issue in versions 0.5.0 through 6.64.0 . Staff users holding the Editor or Super Editor roles can bypass permission restrictions to assign their own roles to users with Author or Contributor roles. This ...

CVE-2026-105678 Ghost: Editors Could Promote Staff Users to Their Own Role

Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. This issue is fixed in version 6.64.0...

CVE-2019-12836

CVE-2019-12836 애플리케이션 JEditor v3.0.5 - JIRA용 WYSIWYG 편집기 Jira를 위한 간단하면서도 강력한 리치 텍스트 편집기입니다. HTML 이메일 가져오기, 풍부한 콘텐츠 붙여넣기, 템플릿 생성 및 필드 미리 채우기 기능을 제공합니다. 제품 공급업체 Bobronix 공급업체 웹사이트 http://bobronix.com/ CVE 참조 https://vulners.com/cve/CVE-2019-12836 영향을 받는 제품 코드 베이스 JEditor - WYSIWYG Editor for Jira -...

CVE-2018-0802_CVE-2017-11882

RTF118820802 CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 연구: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about 패치 분석:...

CVE-2018-17254

CVE-2018-17254 Exploit Title: Joomla JCK Editor 6.4.4 - 'parent' SQL Injection Googke Dork: inurl:/plugins/editors/jckeditor/plugins/jtreelink/ Vendor Homepage: http://docs.arkextensions.com/downloads/jck-editor Version: 6.4.4 Tested on: Debian 10 Ubuntu Windows 11/10 CVE : CVE-2018-17254 PHP...

Joomla_CVE_2026_48907

Сканер MASTA CVE-2026-48907 Автономный сканер в одном файле для Joomla! JCE Editor Автор: Alma !CAUTION 🚨 ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ — ПРОЧТИТЕ ПЕРЕД ИСПОЛЬЗОВАНИЕМ ЭТО ИНСТРУМЕНТ ДЛЯ ПРОВЕДЕНИЯ ИНТРУЗИВНЫХ ТЕСТОВ БЕЗОПАСНОСТИ. ДАННЫЙ ИНСТРУМЕНТ ПРЕДНАЗНАЧЕН ТОЛЬКО ДЛЯ АВТОРИЗОВАННЫХ ОЦЕНОК...

CVE-2022-42095

Backdrop CMS версия 1.23.0 Описание уязвимости: В Backdrop CMS версии 1.23.0 была обнаружена уязвимость хранимого межсайтового скриптинга XSS через контент Page. Векторы атаки: Злоумышленник должен опубликовать что-то в "Page content" и вставить XSS-пейлоад в поле "Body", а также выбрать Raw HTML...

CVE-2023-42426

Идентификатор CVE: CVE-2023-42426 Тип уязвимости: Межсайтовый скриптинг Описание: Уязвимость межсайтового скриптинга XSS в Froala Froala Editor v.4.1.1 позволяет удаленным злоумышленникам выполнять произвольный код через параметр 'Insert link' в компоненте 'Insert Image'. Шаги для воспроизведения...

dbeaver v26.2.2

DBeaver Free multi-platform database tool for developers, SQL programmers, database administrators and analysts. Has a lot of features including schema editor, SQL editor, data editor, AI integration, ER diagrams, data export/import/migration, SQL execution plans, database administration tools,...

CVE-2026-105678: Improper Privilege Management

Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor users, despite not having permission to assign that role. This issue is fixed in version 6.64.0...