35525 matches found
CVE-2026-48046 Streambert Vulnerable to Remote Code Execution (RCE) via Unvalidated Auto-Updater IPC Handler
Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 contain an unvalidated auto-updater URL vulnerability that allows a compromised renderer process to make the main process download and execute an arbitrary binary, resulting in remote...
CVE-2026-48046
Vulnerability summary for CVE-2026-48046: Streambert (Electron desktop app) is affected in versions prior to 2.5.0 by an unvalidated auto-updater URL handled via IPC. A compromised renderer process can trigger the main process to download and execute an arbitrary binary, resulting in remote code ...
Exploit for CVE-2026-18907
CVE-2026-18907 — Path Traversal in TECNO Hi Browser Download H...
CVE-2026-72540
Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid...
CVE-2026-72555 Peppermint Lab Peppermint - Broken Access Control
A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.rolesactive flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops on default installations. All authenticated users bypass...
CVE-2026-72555
A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.rolesactive flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops on default installations. All authenticated users bypass...
EUVD-2026-56010
An insecure direct object reference vulnerability in PhotoPrism through commit bb0b933 allows any user with a valid preview token to retrieve the original-resolution cover photo of any album. The AlbumCover handler does not verify that the requesting user is authorized to access the specified alb...
ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered
...
wifi: carl9170: fix OOB read from off-by-two in TX status handler
...
wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler
...
CVE-2026-73155
Affected versions of cti-transmute allow authenticated users to add or remove emoji reactions on comments without first checking whether those users are authorized to view the target comment. The vulnerable react handler passed an attacker-controlled commentid directly to...
CVE-2026-14548
The Ray Enterprise Translation WordPress plugin (versions prior to 1.7.4 ) is vulnerable to an authorization bypass because it fails to perform capability or nonce checks on a specific AJAX action . This flaw allows any authenticated user, including those with low-level Subscriber privileges, to ...
CVE-2026-51584
An issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the ssoCredentials branch of the SignIn handler in server/router/api/v1/authservice.go, because SSO identity is matched only on an attacker-controllable identifier without binding to the IdP's stable subject cla...
EUVD-2026-56175
An issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the ssoCredentials branch of the SignIn handler in server/router/api/v1/authservice.go, because SSO identity is matched only on an attacker-controllable identifier without binding to the IdP's stable subject cla...
CVE-2026-19078: URL Redirection to Untrusted Site
A flaw was found in the oauth-server component. This open redirect vulnerability occurs when the 'then' parameter in the grant approval handler is not properly validated. A remote attacker can craft a malicious URL that, when approved or denied by an authenticated user, redirects them to an...
PT-2026-70207
Name of the Vulnerable Software and Affected Versions Streambert versions prior to 2.5.0 Description Streambert is a cross-platform Electron Desktop App used for streaming and downloading video content. The application improperly validates executable paths provided to the run-download IPC handler...
WordPress WP Statistics information leakage vulnerability
WordPress WP Statistics is a free and open-source content management system CMS and blog platform built using PHP/MySQL. WordPress WP Statistics has a vulnerability known as information leakage, which stems from the lack of a capability check in the AJAX handler for dashboard analysis. It relies...
CVE-2026-47704: Authorization Bypass Through User-Controlled Key
TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized typebotId and blockId and a foreign live resultId. The webhook resume handler...
CVE-2026-51584
A remote attacker can achieve account takeover in usememos v0.27.1 due to an improper authentication flaw in the SignIn handler (located at server/router/api/v1/auth_service.go). The vulnerability exists because the ssoCredentials branch matches SSO identity based on an attacker-controllable iden...