288385 matches found
CVE-2026-102310: Missing Authorization
Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-95375: Incorrect Authorization
Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-86450: Insertion of Sensitive Information Into Sent Data
Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects DetaWix Mobile Web Portal: before v1.0.19...
CVE-2026-8067: Missing Authorization
An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation...
PT-2026-102861
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description Cross-site scripting in the WebUI allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one origin can intera...
CVE-2026-94952
A stack-based buffer overflow vulnerability exists in the web management interface of the TOTOLINK N150RT (NTR150) running firmware V3.4.0-B20201030 . The flaw is located in the port-forwarding configuration handler at the /boafrm/formPortFw route. It can be triggered by providing specifically cr...
CVE-2026-94953
A stack-based buffer overflow vulnerability exists in the web management interface of the TOTOLINK N150RT (NTR150) router running firmware version V3.4.0-B20201030 . The flaw is reachable via the /boafrm/formAjaxSet route specifically when using the topicurl=setting/setWiFiRepeaterConfig branch a...
CVE-2026-94954
The TOTOLINK N150RT (NTR150) router is susceptible to a stack-based buffer overflow vulnerability within its web management interface, specifically affecting firmware V3.4.0-B20201030 . The flaw is triggered via the url request parameter when the addFilterUrl (or addFilterUrlFlag ) action flag is...
CVE-2026-95340: Incorrect Authorization
Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95352): chromium -- security fixes
Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
CVE-2026-94952
A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formPortFw port-forwarding configuration handler and is triggered by the ipsubnet and fwip request parameters during th...
EUVD-2026-89364
A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formAjaxSet using the topicurl=setting/setWiFiRepeaterConfig branch and the ApCliWEPKey field...
PT-2026-102862
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description Incorrect authorization in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass the web origin policy using a crafted HTML page. SiteIsolation is a...
CVE-2026-95361: Unintended Proxy or Intermediary
Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95361): chromium -- security fixes
Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
Linux Distros Unpatched Vulnerability : CVE-2026-65412
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gat...
PT-2026-102475
An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation...
CVE-2026-94953
A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formAjaxSet using the topicurl=setting/setWiFiRepeaterConfig branch and the ApCliWEPKey field...
PT-2026-102803
A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formFilter access-control / URL filter configuration handler and is triggered by the url request parameter when the...
CVE-2026-94954
A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formFilter access-control / URL filter configuration handler and is triggered by the url request parameter when the...