EUVD-2026-74700

The ELEX WooCommerce Request a Quote WordPress plugin before 2.4.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks and extract arbitrary data from the database...

Malicious code in easypanel-hosting (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6a378b33bb2f33088ed90db4ac48e81368e30d5ef38578dca3b4345e9cb06b [email protected] ships a stub index.js module.exports = and an npm preinstall lifecycle script that collects the installer's hostname, usernam...

CVE-2026-87084

Tanium addressed a server-side request forgery vulnerability in Enforce...

CVE-2026-87084 Tanium addressed a server-side request forgery vulnerability in Enforce.

Tanium addressed a server-side request forgery vulnerability in Enforce...

EUVD-2026-74561

Tanium addressed a server-side request forgery vulnerability in Enforce...

CVE-2026-87084 Tanium addressed a server-side request forgery vulnerability in Enforce.

Tanium addressed a server-side request forgery vulnerability in Enforce...

CVE-2026-87084

Tanium Enforce is affected by a server-side request forgery (SSRF) vulnerability, rated 7.7 (HIGH) by Tanium's CVSS v3.1 assessment (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). The vulnerability allows a network-based attacker with low privileges to exploit the flaw without user interaction, resulting ...

DEBIAN-CVE-2026-87595

Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87595

Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87449

Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87595

Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-73276

A flaw was found in the Erlang/OTP inets httpd server. This vulnerability allows a remote attacker to perform HTTP Request Smuggling due to the server silently dropping HTTP headers that contain whitespace between the header field-name and the colon. When deployed behind a reverse proxy that...

SUSE CVE-2026-24690

Gitea versions before 1.25.5 have insufficient permission checks for updating or rebasing pull request branches...

EUVD-2026-74446

Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87595

Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87595

Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87595

Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87449

A Cross-site request forgery (CSRF) vulnerability exists in DeviceBoundSessionCredentials within Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit this by using a crafted HTML page to bypass web origin policy. Affected systems include various distributions such as Debia...

CVE-2026-87449

Cross-site request forgery in DeviceBoundSessionCredentials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88857

The ELEX WooCommerce Request a Quote WordPress plugin before 2.4.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks and extract arbitrary data from the database...