46304 matches found
CVE-2026-21218
Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-25956 Frappe Affected by XSS and Open Redirect in Sign Up
Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redirect or reflected XSS, depending on the crafted payload when a user signs up. This vulnerability is fixed in 14.99.14 a...
CVE-2026-25956
Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redirect or reflected XSS, depending on the crafted payload when a user signs up. This vulnerability is fixed in 14.99.14 a...
CVE-2026-25956 Frappe Affected by XSS and Open Redirect in Sign Up
Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redirect or reflected XSS, depending on the crafted payload when a user signs up. This vulnerability is fixed in 14.99.14 a...
CVE-2026-25577
The CVE-2026-25577 issue affects emmett-core (and via transitive deps in emmett/emmett55) where emmett_core.http.wrappers.Request.cookies does not handle CookieError, allowing unauthenticated users to trigger HTTP 500s and denial of service by malformed Cookie headers. The Red Hat/NVD OSV and CIR...
CVE-2026-25577 Emmett has an Unhandled CookieError Exception Causing Denial of Service
Emmett is a framework designed to simplify your development process. Prior to 1.3.11, the cookies property in mmettcore.http.wrappers.Request does not handle CookieError exceptions when parsing malformed Cookie headers. This allows unauthenticated attackers to trigger HTTP 500 errors and cause...
Description of the security update for SharePoint Server 2016: February 10, 2026 (KB5002841)
Description of the security update for SharePoint Server 2016: February 10, 2026 KB5002841 Applies To SharePoint Server 2016 Summary Important If you're currently running SharePoint Workflow Manager, you must install the SharePoint Workflow Manager KB5002799 to your farm before you install this...
Description of the security update for SharePoint Server 2016 Language Pack: February 10, 2026 (KB5002840)
Description of the security update for SharePoint Server 2016 Language Pack: February 10, 2026 KB5002840 Applies To SharePoint Server 2016 Summary Important If you're running Microsoft SharePoint Server 2013-type workflows, you must install the August 2025 update for SharePoint Workflow Manager t...
MSHTML Framework Security Feature Bypass Vulnerability
Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network...
February 10, 2026—KB5077179 (OS Build 28000.1575)
February 10, 2026—KB5077179 OS Build 28000.1575 Applies To Windows 11 version 26H1, all editions This cumulative update for Windows 11, version 26H1 KB5077179, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn...
2026-02 .NET 9.0.13 Security Update for x64 Server (KB5077864)
2026-02 .NET 9.0.13 Security Update for x64 Server KB5077864...
2026-02 .NET 9.0.13 Security Update for x64 Client (KB5077864)
2026-02 .NET 9.0.13 Security Update for x64 Client KB5077864...
Exploit for CVE-2017-0143
Cybersecurity Penetration Testing Project Project Overview...
[SECURITY] Fedora 42 Update: cef-144.0.11^chromium144.0.7559.109-2.fc42
CEF is an embeddable build of Chromium, powered by WebKit Blink...
PT-2026-7399
Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 1607 versions prior to 10.0.14393.8868 Microsoft Windows 10 1809 versions prior to 10.0.17763.8389 Microsoft Windows 10 21H2 versions prior to 10.0.19044.6937 Microsoft Windows 10 22H2 versions prior to 10.0.19045.6937...
CVE-2026-21218
Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network...
KB5075941: Windows 11 version 23H2 Security Update (February 2026)
The remote Windows host is missing security update 5075941. It is, therefore, affected by multiple vulnerabilities - Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-21513 - Access of resource using incompatible...
Apache Shiro security vulnerabilities
Apache Shiro is a Java security framework developed by the Apache Foundation in the United States. It is used for authentication, authorization, encryption, and session management. Versions of Apache Shiro such as 1. and 2.0.7 had security vulnerabilities. These vulnerabilities were due to observ...
Frappe Technologies: Frappe Input Validation Vulnerability
Frappe Technologies Frappe is a web development framework based on Python and Mariadb, with integrated front-end pages. Frappe Technologies had a vulnerability in input validation for versions prior to 14.99.14 and 15.94.0. This vulnerability stemmed from a specially crafted registration URL that...