CVE-2026-113023

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code outside the browser's isolated security environment sandbox by convincing a user to view a specially crafted HTML page. The issue stems from improper input validation within the Extensions...

CVE-2026-113016

A flaw was found in chromium-browser. Improper input validation within the Extensions component allows a remote attacker to execute arbitrary code within the browser's restricted isolation environment sandbox. An attacker could exploit this vulnerability by enticing a user to view a specially...

CVE-2026-113020

A flaw was found in chromium-browser. Due to improper input validation in the Date component, a remote attacker can execute arbitrary code outside the browser's restricted sandbox environment by convincing a user to visit a specially crafted HTML page. Successful exploitation could compromise the...

CVE-2026-113012

A flaw was found in chromium-browser. Improper input validation within the Graphics Processing Unit GPU component allows a remote attacker to potentially execute arbitrary code inside the browser's sandbox. An attacker could exploit this vulnerability by convincing a user to load a specially...

CVE-2026-113334

An improper input validation flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/564064199...

CVE-2026-113252

An improper input validation flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556750258...

CVE-2026-113117

An improper input validation flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/563788518...

CVE-2025-60787

CVE-2025-60787 CVE-2025-60787 Poc - RCE - MotionEye = 0.43.1b4 Original link: https://github.com/prabhatverma47/motionEye-RCE-through-config-parameter MotionEye RCE via Client-Side Validation Bypass Summary During security testing of a MotionEye instance running in Docker, it was observed that...

CVE-2018-25031

Swagger UI Cross-Site Scripting POC: CVE-2018-25031 using Selenium in Python This repository contains a Python script that demonstrates a proof of concept POC of a Cross-Site Scripting XSS vulnerability in Swagger UI, using the Selenium library. The goal of this POC is to identify websites that a...

CVE-2026-76487

A vulnerability in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct access control bypass attacks on an affected device. This vulnerability is due to improp...

CVE-2026-76476

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisc...

WSO2-2021-1259

WSO2-2021-1259: H2 RCE via Malicious JDBC Connection String in WSO2 ESB Due to the improper input validation, a remote code execution attack could be carried out using malicious H2 JDBC Connection Strings. Vendor Disclosure: The vendor's disclosure and fix for this vulnerability can be found here...

SUSE CVE-2026-113016

Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-113023

Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-113046

Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-113063

Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-113086

Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-113089

Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-113099

Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-113117

Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...