90769 matches found
CVE-2026-66573: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in JetTabs = 2.3.3.1 versions...
CVE-2026-78294: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...
CVE-2026-66577: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in JetSearch = 3.6.3 versions...
CVE-2026-78295: Cross-Site Request Forgery (CSRF)
Unauthenticated Cross Site Request Forgery CSRF in Xagio SEO = 7.1.0.43 versions...
CVE-2026-25278: Time-of-check Time-of-use (TOCTOU) Race Condition
Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying...
CVE-2026-25261: Untrusted Pointer Dereference
Memory corruption while processing rear sensor IOCTL calls...
CVE-2026-66624: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in WPMasterToolKit = 2.22.0 versions...
CVE-2026-90986: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.21 versions...
CVE-2026-92770
Harbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column to recover the scanner adapter secret one character at a time through response row counts...
CVE-2026-92770 Harbor through 2.15.2 Scanner Credential Disclosure via Query Parameter
Harbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column to recover the scanner adapter secret one character at a time through response row counts...
CVE-2026-92770 Harbor through 2.15.2 Scanner Credential Disclosure via Query Parameter
Harbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column to recover the scanner adapter secret one character at a time through response row counts...
CVE-2026-92770 Harbor through 2.15.2 Scanner Credential Disclosure via Query Parameter
Harbor through 2.15.2 fails to properly restrict the q query parameter filtering on scanner registration access credentials. Project administrators can exploit fuzzy filtering on the AccessCredential column to recover the scanner adapter secret one character at a time through response row counts...
augustus v0.14.30
Augustus - LLM vulnerability scanner for prompt injection, jailbreak, and adversarial attack testing Augustus - LLM Vulnerability Scanner Test large language models against 210+ adversarial attacks covering prompt injection, jailbreaks, encoding exploits, and data extraction. Augustus is a Go-bas...
CVE-2026-19248: Uncontrolled Recursion
QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input...
CVE-2026-51990: Improper Control of Generation of Code
An issue in Sogou Sogou Input Method 16.3.0.3498 fixed in 16.3.0.3498 allows a remote attacker to execute arbitrary code via the bizhelper.exe component...
CVE-2026-27546: Authentication Bypass Using an Alternate Path or Channel
An unauthenticated remote attacker can exploit an authentication bypass in the accountlog function to log in as an admin, even when accounts are properly configured...
CVE-2026-86865: Improper Neutralization of Special Elements used in an SQL Command
Tanium addressed a SQL injection vulnerability in Asset...
CVE-2026-91843: Stack-based Buffer Overflow
A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges...