2554355 matches found
Chrome_Issue992914
Chrome Issue 992914 — 32-bit Port Windows 다시 올리는 이유 / R...
V2E_artifacts
CVE-2021-43267 Work Artifacts This bundle preserves the curre...
CVE-2026-77682
A code injection vulnerability exists in Epiphany when the user invokes form autofill from the context menu on a page containing a malicious HTML form. In embed/web-process-extension/resources/js/ephyautofill.js, getSelector builds a CSS selector by directly interpolating an element's id attribut...
MAL-2026-14346 Malicious code in @next-fonts/font (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e536e77176d5fb4637105c50280763e82a6a273dd7de35bb82da340b0f71163 @next-fonts/font is a typosquat of Next.js's @next/font. Its exported Inter function mimicking next/font/google decodes a base64 blob via atob, then...
Malicious code in @next-fonts/font (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e536e77176d5fb4637105c50280763e82a6a273dd7de35bb82da340b0f71163 @next-fonts/font is a typosquat of Next.js's @next/font. Its exported Inter function mimicking next/font/google decodes a base64 blob via atob, then...
Malicious code in mcq-session (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1acf694ae0258defc54c414980c5f8512b7055e69630ede15a8bfb37d2005b9b On any require/import of mcq-session, the main module runs a top-level async IIFE that reads a file at../../../../public/logo.ico a path escaping the...
MAL-2026-14347 Malicious code in mcq-session (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1acf694ae0258defc54c414980c5f8512b7055e69630ede15a8bfb37d2005b9b On any require/import of mcq-session, the main module runs a top-level async IIFE that reads a file at../../../../public/logo.ico a path escaping the...
Exploit for SQL Injection in Sequelizejs Sequelize
CVE-2026-30951 Sequelize JSON Cast SQL Injection ★ CVE-2026...
Exploit for SQL Injection in Mikro-Orm Mikroorm
CVE-2026-43220 MikroORM SQL Injection ★ CVE-2026-43220 Mikro...
Malicious code in moidevy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eac79904b327f6508820c84c1350dd1bef3fc43eaf6e61d826f17ed5981d664 main.js imports childprocess and issues POST requests to a hardcoded endpoint at https://ipc.shadxino.internal referenced at lines 358 and 452, with...
MAL-2026-14348 Malicious code in moidevy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eac79904b327f6508820c84c1350dd1bef3fc43eaf6e61d826f17ed5981d664 main.js imports childprocess and issues POST requests to a hardcoded endpoint at https://ipc.shadxino.internal referenced at lines 358 and 452, with...
Exploit for Expression Language Injection in Mathjs
CVE-2026-40897 Remote Code Execution in Math.js Expression Par...
Exploit for CVE-2026-60004
CVE-2026-60004 Gitea diffpatch RCE ★ CVE-2026-60004 Gitea di...
Exploit for Eval Injection in Langflow
CVE-2026-33017 Langflow RCE ★ CVE-2026-33017 Langflow Remote...
Exploit for CVE-2026-16723
CVE-2026-16723 Fastjson RCE ★ CVE-2026-16723 Fastjson @JSONT...
Exploit for SQL Injection in Ghost
CVE-2026-26980 ★ CVE-2026-26980 TryGhost Ghost CMS Content AP...
CVE-2026-65644
Rocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6, 8.3.8, 8.2.8, 8.1.8, and 7.10.15 has a REST API endpoint POST /api/v1/livechat/visitor that accepts an unauthenticated, unsanitized name field for Livechat visitors. This name is stored raw and later rendered via...
Exploit for Incorrect Resource Transfer Between Spheres in Openclaw
CVE-2026-25253 OpenClaw 1-Click RCE ★ CVE-2026-25253 OpenClaw...
CVE-2026-18409
The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Single Line Text and Paragraph Text Field Values in all versions up to, and including, 2.0.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...