CVE-2018-18865

The Royal browser extensions TS before 4.3.60728 (Release Date 2018-07-28) and TSX before 3.3.1 (Release Date 2018-09-13) allow Credentials Disclosure.

• CWE-200

• http://packetstormsecurity.com/files/150136/Royal-TS-X-Information-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Nov/25Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2018/Nov/4Exploit, Mailing List, Third Party Advisory
• https://www.exploit-db.com/exploits/45783/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/150136/Royal-TS-X-Information-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Nov/25Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2018/Nov/4Exploit, Mailing List, Third Party Advisory
• https://www.exploit-db.com/exploits/45783/Exploit, Third Party Advisory, VDB Entry

Published

Nov 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1886IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.…5.3
• CVE-2018-18860A local privilege escalation vulnerability has been identifi…
• CVE-2018-18861Buffer overflow in PCMan FTP Server 2.0.7 allows for remote …
• CVE-2018-18862BMC Remedy Mid-Tier 7.1.00 and 9.1.02.003 for BMC Remedy AR …
• CVE-2018-18863NGA ResourceLink 20.0.2.1 allows local file inclusion.
• CVE-2018-18864Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS beca…
• CVE-2018-18867An SSRF issue was discovered in tecrail Responsive FileManag…
• CVE-2018-18868No-CMS 1.1.3 is prone to Persistent XSS via a contact_us nam…
• CVE-2018-18869EmpireCMS V7.5 allows remote attackers to upload and execute…
• CVE-2018-1887IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.…5.9
• CVE-2018-18871Missing password verification in the web interface on Gigase…
• CVE-2018-18872The Kieran O'Shea Calendar plugin before 1.3.11 for WordPres…