37997 matches found
CVE-2026-21513 MSHTML Framework Security Feature Bypass Vulnerability
...
CVE-2026-21218
Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-25956 Frappe Affected by XSS and Open Redirect in Sign Up
Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redirect or reflected XSS, depending on the crafted payload when a user signs up. This vulnerability is fixed in 14.99.14 a...
CVE-2026-25956
Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redirect or reflected XSS, depending on the crafted payload when a user signs up. This vulnerability is fixed in 14.99.14 a...
CVE-2026-25956 Frappe Affected by XSS and Open Redirect in Sign Up
Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redirect or reflected XSS, depending on the crafted payload when a user signs up. This vulnerability is fixed in 14.99.14 a...
CVE-2026-25577
The CVE-2026-25577 issue affects emmett-core (and via transitive deps in emmett/emmett55) where emmett_core.http.wrappers.Request.cookies does not handle CookieError, allowing unauthenticated users to trigger HTTP 500s and denial of service by malformed Cookie headers. The Red Hat/NVD OSV and CIR...
CVE-2026-25577 Emmett has an Unhandled CookieError Exception Causing Denial of Service
Emmett is a framework designed to simplify your development process. Prior to 1.3.11, the cookies property in mmettcore.http.wrappers.Request does not handle CookieError exceptions when parsing malformed Cookie headers. This allows unauthenticated attackers to trigger HTTP 500 errors and cause...
MSHTML Framework Security Feature Bypass Vulnerability
Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network...
Description of the security update for SharePoint Server 2016 Language Pack: February 10, 2026 (KB5002840)
None None...
February 10, 2026—KB5077179 (OS Build 28000.1575)
None None...
Description of the security update for SharePoint Server 2016: February 10, 2026 (KB5002841)
None None...
2026-02 .NET 9.0.13 Security Update for x64 Client (KB5077864)
2026-02 .NET 9.0.13 Security Update for x64 Client KB5077864...
2026-02 .NET 9.0.13 Security Update for x64 Server (KB5077864)
2026-02 .NET 9.0.13 Security Update for x64 Server KB5077864...
Exploit for CVE-2017-0143
Cybersecurity Penetration Testing Project Project Overview...
[SECURITY] Fedora 42 Update: cef-144.0.11^chromium144.0.7559.109-2.fc42
CEF is an embeddable build of Chromium, powered by WebKit Blink...
KLA90878 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, spoof user interface, obtain sensitive information, cause denial of service. Below is a...
Microsoft MSHTML Framework 安全漏洞
The Microsoft MSHTML Framework is a software framework developed by Microsoft that is used for parsing and rendering HTML documents. There are security vulnerabilities in the Microsoft MSHTML Framework. Attackers can exploit these vulnerabilities to bypass certain features. The following products...
February 10, 2026-KB5074837 Cumulative Update for .NET Framework 4.8.1 for Windows 11, version 26H1
None None...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 145.0.7632.45 contained a resource management vulnerability. This vulnerability stemmed from a problem with reusing resources after they were released in Ozone, which could lead to exploiting heap corruptio...