288 matches found
PT-2026-75963
GHSA-03 — x-proxy-path header reflected into admin HTML/JS/CSS cache-poisoning XSS and concatenated into redirect open-redirect Severity: Medium CVSS v3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS suggested base score: 6.1 — Medium Re-validate in the first.gov calculator before...
PT-2026-76572
Name of the Vulnerable Software and Affected Versions Etherpad versions prior to 3.1.0 Description Files src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts generate temporary filenames using Math.random, which is not cryptographically secure and predictable across calls withi...
PT-2026-76573
Name of the Vulnerable Software and Affected Versions Etherpad versions 2.1.0 through 3.0.0 Description Etherpad fails to properly sanitize the x-proxy-path request header, leading to two distinct issues when client-supplied headers reach the server. First, in src/node/hooks/express/admin.ts, the...
PT-2026-76574
Name of the Vulnerable Software and Affected Versions Etherpad versions 2.6.0 through 3.0.0 Description An issue exists in the device-to-device author-token transfer mechanism. The system uses the POST /tokenTransfer endpoint to store an author token and exposes it via the GET /tokenTransfer/uuid...
EUVD-2013-7147
Malware in sbrugna...
EUVD-2015-4110
Malware in sbrugna...
EUVD-2015-3343
Malware in sbrugna...
EUVD-2015-3355
Malware in sbrugna...
EUVD-2015-2395
Malware in sbrugna...
EUVD-2018-20920
Malware in sbrugna...
EUVD-2018-20921
Malware in sbrugna...
EUVD-2018-18581
Malware in sbrugna...
EUVD-2019-8010
Malware in sbrugna...
EUVD-2020-15541
Malware in sbrugna...
EUVD-2020-15542
Malware in sbrugna...
EUVD-2020-15539
Malware in sbrugna...
EUVD-2021-21463
Malware in sbrugna...
EUVD-2021-21464
Malware in sbrugna...