Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had...
CVE-2026-91724
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the render
#advisory
共收录 23580 条相关情报。
← 返回所有主题Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote...
CVE-2026-91723
Race condition in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to spoof UI elements
Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...
CVE-2026-91716
Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outsi
Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47...
CVE-2026-91727
Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a local attacker
Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...
CVE-2026-91721
Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arb
Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker...
CVE-2026-91725
Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensitive inform
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to...
CVE-2026-91722
Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitra
Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker...
CVE-2026-91720
Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside
@zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover
CVE-2026-61560
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE transport mode (`
@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery
CVE-2026-61559
# Server-Side Request Forgery via X-GitLab-API-URL Header Allows Credential Theft ## Affected - **Repository:** `zerei
QloApps through 1.7.0 Reflected XSS via Hotel Feature Validation Errors
CVE-2026-92234
QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Res
Cotonti 1.0.0 Comments Plugin PHP Object Injection via ci Parameter
CVE-2026-91939
Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without allowed_classes restriction, allowing
@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport
CVE-2026-61568
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTT
@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport
CVE-2026-61568
`@zereight/mcp-gitlab` exposes its Streamable HTTP MCP endpoint without an effective Host or Origin allowlist. A malicio
@zereight/mcp-gitlab has multiple safety-control bypasses: execute_graphql read-only + allow-list bypass, unauthenticated transports, session-exhaustion DoS
### Summary @zereight/mcp-gitlab exposes GitLab to an LLM agent while relying on read-only mode, a project allow-list, a
emp3r0r has an unauthenticated HTTP Polling DoS
CVE-2026-61554
emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the `http_poll` C2 transport acc
emp3r0r has an unauthenticated HTTP Polling DoS
CVE-2026-61554
### Summary The `http_poll` C2 transport accepts attacker-controlled HTTP polling sessions before CBOR `MsgAuth` authent
Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race
CVE-2026-79994
The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized work
Fireshare has unauthenticated SSRF via missing login_required on webhook test endpoints
CVE-2026-54544
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbou
Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/Overwrite
CVE-2026-54337
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video up