CVE-2026-42552

Flight is an extensible micro-framework for PHP. Prior to 3.18.1, the default error handler Engine::error writes the full exception message, exception code, and stack trace including absolute filesystem paths directly into the HTTP 500 response, with no debug gating. Production deployments leak...

CVE-2026-42552: Generation of Error Message Containing Sensitive Information

Flight is an extensible micro-framework for PHP. Prior to 3.18.1, the default error handler Engine::error writes the full exception message, exception code, and stack trace including absolute filesystem paths directly into the HTTP 500 response, with no debug gating. Production deployments leak...

CVE-2018-18282

Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /error page...

CVE-2018-18282

Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /error page...

CVE-2018-18282: Improper Neutralization of Input During Web Page Generation

Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /error page...

Adobe Flash Player Object Type Confusion

This module exploits a vulnerability found in Adobe Flash Player. By supplying a corrupt AMF0 "error" response, it is possible to gain arbitrary remote code execution under the context of the user. This vulnerability has been exploited in the wild as part of the "World Uyghur Congress...