CVE-2025-66022

CVE-2025-66022 affects FACTION prior to 1.7.1. An unauthenticated extension upload via the /portal/AppStoreDashboard endpoint, plus an extension execution path in the extension framework, permits untrusted code to execute arbitrary system commands on the server, enabling remote code execution on ...

UBUNTU-CVE-2018-20066

Incorrect object lifecycle in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...