38330 matches found
CVE-2026-26003
CVE-2026-26003 affects FastGPT versions 4.14.0â4.14.5, where an unauthenticated attacker can access the plugin system via FastGPT/api/plugin/xxx, potentially crashing the plugin system and causing loss of plugin installation status. The impact on confidentiality/integrity is limited, with availab...
CVE-2026-21513 MSHTML Framework Security Feature Bypass Vulnerability
...
CVE-2026-21513 MSHTML Framework Security Feature Bypass Vulnerability
...
CVE-2026-21218
Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-25956 Frappe Affected by XSS and Open Redirect in Sign Up
Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redirect or reflected XSS, depending on the crafted payload when a user signs up. This vulnerability is fixed in 14.99.14 a...
CVE-2026-25956
Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redirect or reflected XSS, depending on the crafted payload when a user signs up. This vulnerability is fixed in 14.99.14 a...
CVE-2026-25956 Frappe Affected by XSS and Open Redirect in Sign Up
Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redirect or reflected XSS, depending on the crafted payload when a user signs up. This vulnerability is fixed in 14.99.14 a...
CVE-2026-25577
The CVE-2026-25577 issue affects emmett-core (and via transitive deps in emmett/emmett55) where emmett_core.http.wrappers.Request.cookies does not handle CookieError, allowing unauthenticated users to trigger HTTP 500s and denial of service by malformed Cookie headers. The Red Hat/NVD OSV and CIR...
CVE-2026-25577 Emmett has an Unhandled CookieError Exception Causing Denial of Service
Emmett is a framework designed to simplify your development process. Prior to 1.3.11, the cookies property in mmettcore.http.wrappers.Request does not handle CookieError exceptions when parsing malformed Cookie headers. This allows unauthenticated attackers to trigger HTTP 500 errors and cause...
Description of the security update for SharePoint Server 2016 Language Pack: February 10, 2026 (KB5002840)
None None...
MSHTML Framework Security Feature Bypass Vulnerability
Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network...
Description of the security update for SharePoint Server 2016: February 10, 2026 (KB5002841)
None None...
February 10, 2026âKB5077179 (OS Build 28000.1575)
None None...
WebX-Framework
No d...
2026-02 .NET 9.0.13 Security Update for x64 Client (KB5077864)
2026-02 .NET 9.0.13 Security Update for x64 Client KB5077864...
2026-02 .NET 9.0.13 Security Update for x64 Server (KB5077864)
2026-02 .NET 9.0.13 Security Update for x64 Server KB5077864...
Exploit for CVE-2017-0143
Cybersecurity Penetration Testing Project Project Overview...
[SECURITY] Fedora 42 Update: cef-144.0.11^chromium144.0.7559.109-2.fc42
CEF is an embeddable build of Chromium, powered by WebKit Blink...
Microsoft MSHTML Framework ĺŽĺ ¨ćźć´
The Microsoft MSHTML Framework is a software framework developed by Microsoft that is used for parsing and rendering HTML documents. There are security vulnerabilities in the Microsoft MSHTML Framework. Attackers can exploit these vulnerabilities to bypass certain features. The following products...