Capgo before 12.128.2 contains a server-side validation bypass vulnerability in organization...
CVE-2026-56333
Capgo before 12.128.2 contains a server-side validation bypass vulnerability in organization security settings that allo
2026-07-01 归档
今日共收录 1573 条安全情报，包含 770 个 CVE，406 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Incorrect security UI in Document Picture-in-Picture in Google Chrome on Android prior to 150.0...
CVE-2026-14141
Incorrect security UI in Document Picture-in-Picture in Google Chrome on Android prior to 150.0.7871.47 allowed a remote
Incorrect security UI in Passwords in Google Chrome on iOS prior to 150.0.7871.47 allowed a...
CVE-2026-14143
Incorrect security UI in Passwords in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform U
Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API...
CVE-2026-56264
Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API server's /execute_js en
Storage Concentrator (SC & SCVM) is vulnerable to reflected cross-site scripting due to...
CVE-2026-50040
Storage Concentrator (SC & SCVM) is vulnerable to reflected cross-site scripting due to unsanitized content being echoed
Insufficient validation of untrusted input in Input in Google Chrome on Android prior to 150.0...
CVE-2026-14140
Insufficient validation of untrusted input in Input in Google Chrome on Android prior to 150.0.7871.47 allowed a remote
Storage Concentrator (SC & SCVM) is vulnerable to SQL injection through cookie values processed...
CVE-2026-55721
Storage Concentrator (SC & SCVM) is vulnerable to SQL injection through cookie values processed by the login.pl and debu
Storage Concentrator (SC & SCVM) contains hardcoded credentials for numerous internal services...
CVE-2026-50110
Storage Concentrator (SC & SCVM) contains hardcoded credentials for numerous internal services embedded within a configu
Capgo console.capgo.app/login before 12.128.2 accepts access_token and refresh_token in URL query...
CVE-2026-56224
Capgo console.capgo.app/login before 12.128.2 accepts access_token and refresh_token in URL query parameters, automatica
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47...
CVE-2026-14128
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a...
CVE-2026-14123
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to spoo
Inappropriate implementation in PreviewTab in Google Chrome on Android prior to 150.0.7871.47...
CVE-2026-14129
Inappropriate implementation in PreviewTab in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker
Inappropriate implementation in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47...
CVE-2026-14114
Inappropriate implementation in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attack
Incorrect security UI in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote...
CVE-2026-14126
Incorrect security UI in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform doma
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150...
CVE-2026-14137
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a re
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150...
CVE-2026-14136
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a re
Inappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.47...
CVE-2026-14134
Inappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to
Insufficient validation of untrusted input in Text in Google Chrome on Android prior to 150.0...
CVE-2026-14106
Insufficient validation of untrusted input in Text in Google Chrome on Android prior to 150.0.7871.47 allowed a remote a
Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule
CVE-2025-10994
### Summary A memory-safety vulnerability in Open Babel's GAMESS output parser caused a use-after-free when reading a c
Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys
CVE-2026-48806
### Description This is a residual bypass of CVE-2026-47732 / GHSA-pr2w-4gpj-cpq4 left after the initial fix for unguar