CVE-2026-27012

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a privilege escalation and authentication bypass vulnerability in OpenSTAManager allows any attacker to arbitrarily change a user's group idgruppo by directly calling...

chromium-browser: universal xss in blink

Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker controlled JavaScript to be run during the invocation of a private script method, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML pag...

Blahz-DNS 0.2 Direct Script Call Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4618/info Blahz-DNS is a web based management tool for DNS information. It is implemented in PHP, and available for Linux systems. By directly calling scripts included with Blahz-DNS, it is possible to bypass the...