PT-2026-8288

CVE-2026-26298 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2026-26298 Published : Feb. 14, 2026, 4:15 a.m. | 1 hour, 26 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2024-26298

creationtimestamp| type| source ---|---|--- 2024-02-27 23:26:39+00:00| seen| https://t.me/ctinow/194944 2024-02-27 23:26:55+00:00| seen| https://t.me/ctinow/194955...

CVE-2023-26298

creationtimestamp| type| source ---|---|--- 2023-06-13 02:19:32+00:00| seen| https://t.me/cibsecurity/65149...

CVE-2023-26298

Previous versions of HP Device Manager prior to HPDM 5.0.10 could potentially allow command injection and/or elevation of privileges...

CVE-2023-26298

Previous versions of HP Device Manager prior to HPDM 5.0.10 could potentially allow command injection and/or elevation of privileges...

CVE-2023-26298

CVE-2023-26298 affects HP Device Manager (HPDM) prior to version 5.0.10. The root cause is command execution and/or elevation of privileges in vulnerable HPDM components, with the vulnerability exploitable remotely (per CVSS 3.1 vector). HP's security advisory and subsequent HPDM 5.0.10 release a...

CVE-2023-26298

Previous versions of HP Device Manager prior to HPDM 5.0.10 could potentially allow command injection and/or elevation of privileges...

CVE-2023-26298

Previous versions of HP Device Manager prior to HPDM 5.0.10 could potentially allow command injection and/or elevation of privileges...

Fedora: Security Advisory for rubygem-redcarpet (FEDORA-2023-8682a0e17d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for rubygem-redcarpet (FEDORA-2023-44daa9c1d4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : rubygem-redcarpet (2023-44daa9c1d4)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-44daa9c1d4 advisory. A security flow was found on redcarpet that escaping html was not properly done even if requested on some cases which may cause XSS vulnerability. This issue...

Fedora 37 : rubygem-redcarpet (2023-8682a0e17d)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-8682a0e17d advisory. A security flow was found on redcarpet that escaping html was not properly done even if requested on some cases which may cause XSS vulnerability. This issue...

Fedora 36 : rubygem-redcarpet (2023-597f13ffb9)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-597f13ffb9 advisory. A security flow was found on redcarpet that escaping html was not properly done even if requested on some cases which may cause XSS vulnerability. This issue...

SUSE CVE-2020-26298

Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions no HTML escaping was being performed when processing quotes. This applies even when the :escapehtml opti...

OESA-2021-1175 rubygem-redcarpet security update

A fast, safe and extensible Markdown to XHTML parser. Security Fixes: Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions no HTML escaping was being perform...

Debian DSA-4831-1 : ruby-redcarpet - security update

Johan Smits discovered that ruby-redcarpet, a markdown parser, did not properly validate its input. This would allow an attacker to mount a cross-site scripting attack. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

[SECURITY] [DSA 4831-1] ruby-redcarpet security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4831-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 15, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DLA 2526-1] ruby-redcarpet security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2526-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 15, 2021 https://wiki.debian.org/LTS -...

CVE-2020-26298

creationtimestamp| type| source ---|---|--- 2021-01-11 22:46:14+00:00| seen| https://t.me/cibsecurity/21914...

CVE-2020-26298

CVE-2020-26298 affects the Redcarpet Ruby gem (rubygem-redcarpet) prior to 3.5.1, where HTML escaping was not performed for quotes, enabling a cross-site scripting (XSS) vector. The issue is fixed in version 3.5.1 (via the referenced commit); upgrading to 3.5.1 or newer mitigates the vulnerabilit...