Results
57,547· Page 419/1151External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a netw
Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) allows an unauthorized attacker t
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a ne
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a ne
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofin
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofin
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an unauthorized
Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a networ
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofin
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a netw
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature o
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized
Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a
Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized att
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a net
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-
Microsoft Edge (Chromium-based) Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized
Gitea versions up to and including 1.26.1 allow Git smart HTTP requests authenticated with bearer tokens to bypass repos
Gitea versions up to and including 1.26.2 allow Git LFS object reuse to authorize private source objects for users who h
Gitea versions from 1.25.0 before 1.26.0 allow stored cross-site scripting through the extensionsRequired field in glTF
Gitea versions before 1.25.5 use release tag names and asset names as filesystem path components when dumping release as
Gitea versions up to and including 1.26.1 allow OAuth2 access token scope enforcement to be bypassed through HTTP Basic
Gitea versions up to and including 1.26.1 do not enforce repository-unit authorization on issue-template API endpoints.
Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowin
Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing sp
Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allo
Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which c
Gitea versions up to and including 1.26.2 allow repository RSS and Atom feed endpoints to bypass API access token scope
Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permissio
Gitea versions before 1.25.5 allow a user to change another user's primary email address.
Gitea versions before 1.25.5 do not enforce a timeout on git grep searches, allowing expensive searches to consume serve
Gitea versions before 1.25.5 do not use the migration HTTP transport for LFS push and sync mirror operations, bypassing
Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowi
Gitea versions before 1.25.5 do not consistently enforce OAuth2 authorization code expiry and single-use behavior during
Gitea versions up to and including 1.26.1 allow the Allow edits from maintainers permission path to authorize commits to
Test your stack for 2026issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.