xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component

A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...

xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component

A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...

xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component

A flaw was found in the XMLRPC-C Library. This reflected cross-site scripting XSS vulnerability exists in the error page component. A remote attacker could exploit this by tricking a user into clicking a specially crafted link. Successful exploitation could lead to the execution of malicious...

The vulnerability in the function dcn401_init_hw() of the drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c driver module of the Direct Rendering Infrastructure (DRI) graphics card driver for the Linux operating system’s kernel. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the dcn401inithw function in the drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401hwseq.c driver of the Direct Rendering Infrastructure DRI module for AMD video cards in Linux operating systems is related to pointer aliasing. Exploiting this vulnerability could allow a remote...

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

The vulnerability of the comedi_device_attach() function in the drivers/comedi/drivers.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the comedideviceattach function in the drivers/comedi/drivers.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the hx9023s_set_samp_freq() function in the drivers/iio/proximity/hx9023s.c driver for various types of built-in kernel sensors in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hx9023ssetsampfreq function in the drivers/iio/proximity/hx9023s.c driver for various types of built-in kernel sensors in the Linux operating system is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow a...

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

The vulnerability of the mm_cid_do_fixuptasks_to_cpus() function in the kernel/sched/core.c module, which is part of the Linux operating system’s resource management support, allows a hacker to trigger a service failure.

The vulnerability of the mmciddofixuptaskstocpus function in the kernel/sched/core.c module, which is part of the Linux operating system’s resource management support mechanism, involves executing a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could...

PT-2026-83719

Name of the Vulnerable Software and Affected Versions Google Cloud Build versions prior to 2026-06-24 Description An incorrect authorization issue exists in the GitHub Trigger Comment Control within Google Cloud Platform. A remote attacker can bypass expected review boundaries by manipulating...

The vulnerability in Google Chrome and Microsoft Edge web browsers, related to the use of memory after it is freed, allows a hacker to trigger a service failure.

The vulnerability in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

C-MOR 6.0104 - Cross-Site Scripting (XSS)

Exploit Title: C-MOR 6.0104 - Cross-Site Scripting XSS Google Dork: N/A Date: 2026-07-23 Exploit Author: Samir Shamdin Alb Cyber Guards Vendor Homepage: https://www.c-mor.com Software Link: https://www.c-mor.com/ Version: = 6.0104 Tested on: C-MOR Video Surveillance V6.0104 CVE: CVE-2026-51133 1...

The vulnerability in Google Chrome and Microsoft Edge web browsers, related to the use of memory after it is freed, allows a hacker to trigger a service failure.

The vulnerability in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of IBM Langflow OSS’s visual development software for AI agents lies in the failure to eliminate instructions in dynamically executed code, allowing attackers to execute arbitrary code.

The vulnerability of the software for visual development of IBM Langflow OSS AI agents lies in the failure to take measures to neutralize instructions in dynamically executed code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the mshv_handle_gpa_intercept() function in the drivers/hv/mshv_root_main.c file of the Linux operating system for Microsoft HyperV kernel driver allows a attacker to cause a service failure.

The vulnerability of the mshvhandlegpaintercept function in the drivers/hv/mshvrootmain.c file of the Microsoft HyperV Linux operating system kernel driver is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service...

The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260831-73-0008

The vulnerability in MinIO is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260831-73-0006

The vulnerability of the soapaddxmlref function in the PHP programming language is related to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...