Lucene search
+L

50524 matches found

GithubExploit
GithubExploit
•added 2026/02/26 9:41 a.m.•239 views

Exploit for CVE-2010-2568

Zero Click Exploits Android, OSX, Linux, Windows, iOS, IoT, S...

10CVSS8.4AI score0.89623EPSS
SaveExploits15
RedhatCVE
RedhatCVE
•added 2026/02/25 4:17 p.m.•16 views

CVE-2026-2634

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4...

9.8CVSS6AI score0.00358EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/02/24 2:16 p.m.•42 views

CVE-2026-2634

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability affects Firefox for iOS 147.4...

9.8CVSS6AI score0.00358EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/02/24 2:16 p.m.•24 views

CVE-2026-2634

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4...

9.8CVSS6AI score0.00358EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/02/24 1:33 p.m.•16 views

CVE-2026-2634 Spoofed web content presented under trusted domains using scripted navigation on Firefox iOS

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4...

6AI score0.00358EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/24 1:33 p.m.•56 views

CVE-2026-2634 Spoofed web content presented under trusted domains using scripted navigation on Firefox iOS

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4...

0.00358EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/24 1:33 p.m.•153 views

CVE-2026-2634

The vulnerability CVE-2026-2634 affects Firefox for iOS . Malicious scripts could cause desynchronization between the address bar and web content before a response is received, allowing attacker‑controlled pages to be displayed under spoofed domains. The vulnerability is stated to be fixed in Fir...

9.8CVSS6AI score0.00358EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•5 views

CVE-2026-2634: User Interface (UI) Misrepresentation of Critical Information

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.4...

9.8CVSS6AI score0.00358EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•31 views

Mozilla Firefox for iOS security vulnerabilities

Mozilla Firefox for iOS is a web browser designed for iOS devices by the Mozilla Foundation in the United States. Versions of Mozilla Firefox for iOS prior to 147.4 contained a security vulnerability. This vulnerability allowed malicious scripts to cause the address bar and web content to be out ...

9.8CVSS5.9AI score0.00358EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/24 12:00 a.m.•27 views

PT-2026-21689

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 147.4 Description A flaw exists in Firefox for iOS that could allow malicious scripts to cause a mismatch between the address bar display and the actual web content. This could lead to a user being presented...

9.8CVSS5.9AI score0.00358EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2026/02/23 5:32 a.m.•15 views

CVE-2026-2974

A vulnerability was identified in AliasVault App up to 0.25.3 on Android/iOS. This vulnerability affects unknown code of the file sharedprefs/aliasvault.xml of the component Backup Handler. The manipulation of the argument accessToken/refreshToken/metadata/keyderivationparams/authmethods leads to...

2.5CVSS4AI score0.00111EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/23 12:00 a.m.•10 views

CVE-2026-2974: Exposure of Backup File to an Unauthorized Control Sphere

A vulnerability was identified in AliasVault App up to 0.25.3 on Android/iOS. This vulnerability affects unknown code of the file sharedprefs/aliasvault.xml of the component Backup Handler. The manipulation of the argument accessToken/refreshToken/metadata/keyderivationparams/authmethods leads to...

2.5CVSS4AI score0.00111EPSS
SaveExploits0References1
Mozilla
Mozilla
•added 2026/02/20 12:00 a.m.•78 views

Security Vulnerabilities fixed in Firefox for iOS 147.4 — Mozilla

Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains...

9.8CVSS6AI score0.00358EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/02/19 11:16 p.m.•22 views

CVE-2026-26327

OpenClaw is a personal AI assistant. Discovery beacons Bonjour/mDNS and DNS-SD include TXT records such as lanHost, tailnetDns, gatewayPort, and gatewayTlsSha256. TXT records are unauthenticated. Prior to version 2026.2.14, some clients treated TXT values as authoritative routing/pinning inputs...

7.1CVSS0.00111EPSS
SaveExploits0References3
NVD
NVD
•added 2026/02/18 10:16 p.m.•27 views

CVE-2019-25354

iSmartViewPro 1.3.34 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the camera ID input field. Attackers can paste a 257-character buffer into the camera DID and password fields to trigger an application crash on iOS devices...

7.5CVSS0.0036EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/02/18 9:55 p.m.•52 views

CVE-2019-25354 iSmartViewPro 1.3.34 - Denial of Service

iSmartViewPro 1.3.34 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the camera ID input field. Attackers can paste a 257-character buffer into the camera DID and password fields to trigger an application crash on iOS devices...

7.5CVSS0.0036EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/02/18 9:55 p.m.•43 views

CVE-2019-25354 iSmartViewPro 1.3.34 - Denial of Service

iSmartViewPro 1.3.34 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the camera ID input field. Attackers can paste a 257-character buffer into the camera DID and password fields to trigger an application crash on iOS devices...

7.5CVSS6AI score0.0036EPSS
SaveExploits0References4
CVE
CVE
•added 2026/02/18 9:54 p.m.•26 views

CVE-2019-25349

CVE-2019-25349 affects ScadaApp for iOS (version 1.1.4.0). The vulnerability is a denial of service caused by an oversized buffer in the Servername field, where pasting a 257-character buffer during login can crash the app on iOS devices. CVSS details: CVSS v4.0 base score 4.6 (AV:L/AC:L/PR:N/UI:...

7.5CVSS6AI score0.00277EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/18 12:00 a.m.•8 views

CVE-2019-25349: Buffer Copy without Checking Size of Input

ScadaApp for iOS 1.1.4.0 contains a denial of service vulnerability that allows attackers to crash the application by inputting an oversized buffer in the Servername field. Attackers can paste a 257-character buffer during login to trigger an application crash on iOS devices...

7.5CVSS6AI score0.00277EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/18 12:00 a.m.•28 views

PT-2026-20529

iSmartViewPro 1.3.34 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the camera ID input field. Attackers can paste a 257-character buffer into the camera DID and password fields to trigger an application crash on iOS devices...

7.5CVSS5.8AI score0.0036EPSS
SaveExploits0References5
Rows per page
Query Builder