Exploit for CVE-2025-2783

Chromium CVE-2025-2783: Sandbox Escape & Full-Chain RCE Exploi...

Nodemailer: CRLF injection in Nodemailer List-* header comments allows arbitrary message header injection

Summary Nodemailer constructs List- headers from the caller-provided list message option using internally prepared header values. The list..comment field is inserted into those prepared values without removing CR \r or LF \n characters. Because prepared headers bypass the normal header-value...

@amwaljs/checkout-angular (0.2.11), @bitblit/ngx-acute-common (>=6.1.182-alpha, <=6.1.201-alpha) +53 more potentially affected by CVE-2026-54266 via @angular/common (>=21.0.0, <=21.2.16)

@angular/common NPM version =21.0.0, =6.1.182-alpha, =6.1.182-alpha, =0.1.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =3.0.1, =2.0.1, =2.0.1, =2.0.1, =6.0.1, =2.0.1, =4.0.0, =6.1.0-edge.4 and more Source cves: CVE-2026-54266 Source advisory: SNYK:JS-ANGULARCOMMON-17356555...

CVE-2026-6045 Heap buffer overflow in EMF+ gradient brush import

LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow existed when importing an EMF+ gradient brush. The number of gradient blend points was read from the file and used to compute an allocation size, but that multiplication could overflow, so a small...

CVE-2026-20262 Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system. This vulnerability exists because the affected software does not properly validate...

CVE-2026-49775

creationtimestamp| type| source ---|---|--- 2026-06-15 16:16:15+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3modomnbtv62o 2026-06-15 16:16:33+00:00| seen| https://bsky.app/profile/potato.software/post/3modon74ty22f...

CVE-2026-9595

Impact: When a user-configured proxy on webpack-dev-server has a broad context e.g. / and ws: true, it also intercepts the dev server's own HMR WebSocket and forwards it to the proxy target. This leaks the browser's cookies and Origin header to the backend, bypasses the dev server's Host/Origin...

CVE-2026-5242

creationtimestamp| type| source ---|---|--- 2026-06-15 16:10:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modoceu4652d 2026-06-15 18:02:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3modulbmoiu2n...

MGASA-2026-0208 Updated libinput packages fix security vulnerability

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution...

Updated evince, atril & xreader packages fix security vulnerability

Evince/Atril/Xreader command injection. CVE-2026-46529...

CVE-2026-48969

creationtimestamp| type| source ---|---|--- 2026-06-15 15:53:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modndbh6zl2u 2026-06-22 16:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3movbuuut7n2i...

CVE-2026-3375

creationtimestamp| type| source ---|---|--- 2026-06-15 15:38:06+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3modmiexfw62m...

CVE-2026-9595

creationtimestamp| type| source ---|---|--- 2026-06-15 14:51:06+00:00| seen| https://bsky.app/profile/bjohansebas.me/post/3modjudajts2z 2026-06-15 15:06:59+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3modkqrbuns27 2026-06-17 18:51:46+00:00| seen|...

CVE-2026-5230

Improper Access Control, Missing Authorization vulnerability in MIA Technology Inc. Pizzy Library allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pizzy Library: from 1.0.0.26250 before 1.3.9.26250...

CVE-2016-20067

WordPress CP Polls 1.0.8 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can craft malicious HTML pages that execute unwanted poll operations when administrators visit the page while logged in...

Chromium: CVE-2026-12019 Out of bounds write  Codecs

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

EUVD-2026-36722

Incorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allows Privilege Escalation. This issue affects Masteriyo - LMS: from n/a through 2.2.0...

CVE-2026-9278

creationtimestamp| type| source ---|---|--- 2026-06-15 12:02:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modageeszb23...

CVE-2026-47835

creationtimestamp| type| source ---|---|--- 2026-06-15 12:00:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3modacykoeu2o 2026-06-15 20:09:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe3ofsskn2x 2026-07-13 11:07:06+00:00| seen|...

webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced

A flaw was found in WebKitGTK. Processing malicious web content may prevent Content Security Policy from being enforced due to a validation issue with improper logic...