Bludit CMS 3.20.0 - Reflected Cross-Site Scripting

Exploit Title: Bludit CMS 3.20.0 - Reflected Cross-Site Scripting Date: 2026-08-11 Exploit Author: Ranjit Kumar Singh Vendor Homepage: https://www.bludit.com/ Software Link: https://github.com/bludit/bludit/archive/refs/tags/3.20.0.zip Version: 3.0.0 through 3.20.0 all versions before commit...

CVE-2026-84347: Use After Free

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Chromecast Component DoS

The vulnerability in Google Chrome and Microsoft Edge’s web browsers is related to errors in handling HTTP requests. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

RockyLinux 8 : wget (RLSA-2026:62144)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62144 advisory. wget: GNU Wget: Memory corruption via crafted Metalink URL CVE-2026-58469 wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to...

AlmaLinux 9 : wget (ALSA-2026:62143)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:62143 advisory. wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption CVE-2026-58471 wget: GNU Wget: Arbitrary code execution or...

USB Component DoS

The vulnerability in the USB components of Google Chrome and Microsoft Edge is related to a lack of proper data security mechanisms. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service by using a specially crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-84371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From version 1.9.0 until...

Google Chrome Microsoft Edge DoS

The vulnerability in the Extensions component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability allows a remote attacker to trigger a denial-of-service condition by using a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The DOM component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploiting this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Isolated Web Apps Data Compromise

The vulnerability in the Isolated Web Apps component of Google Chrome and Microsoft Edge web browsers is related to a lack of proper data security mechanisms. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

DevTools Component DoS

The vulnerability in the DevTools component of Google Chrome and Microsoft Edge is related to a lack of proper data security mechanisms. Exploiting this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...

Google Chrome Microsoft Edge Data Compromise

The vulnerability in the TabStrip component of Google Chrome and Microsoft Edge web browsers is related to authentication bypass via spoofing. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

Blink Component DoS

The Blink component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

SVG Component Access Sensitive Data

The vulnerability in the SVG component of Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

Enterprise component Google Chrome Microsoft Edge Data Compromise

The vulnerability in the Enterprise component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

Cast Receiver Component DoS

The vulnerability in the Cast Receiver component of Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...

Chromecast Component Data Compromise

The vulnerability in Google Chrome and Microsoft Edge web browsers for Chromecast is related to insufficient input validation. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

PDF component Google Chrome Microsoft Edge Data Compromise

The PDF component vulnerability in Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

History Component Data Compromise

The vulnerability in the History component of Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploiting this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

Oilpan Component DoS

The vulnerability in the Oilpan component of Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...