19 matches found
GO-2026-5260 SiYuan has incomplete fix for CVE-2026-33066: XSS in github.com/siyuan-note/siyuan/kernel
SiYuan has incomplete fix for CVE-2026-33066: XSS in github.com/siyuan-note/siyuan/kernel...
GHSA-8Q5W-MMXF-48JG SiYuan has incomplete fix for CVE-2026-33066: XSS
Summary The incomplete fix for SiYuan's bazaar README rendering enables the Lute HTML sanitizer but fails to block tags, allowing stored XSS via srcdoc attributes containing embedded scripts that execute in the Electron context. Affected Package - Ecosystem: Go - Package:...
SiYuan has incomplete fix for CVE-2026-33066: XSS
Summary The incomplete fix for SiYuan's bazaar README rendering enables the Lute HTML sanitizer but fails to block tags, allowing stored XSS via srcdoc attributes containing embedded scripts that execute in the Electron context. Affected Package - Ecosystem: Go - Package:...
CVE-2026-33066
SiYuan is a personal knowledge management system. In versions 3.6.0 and below, the backend renderREADME function uses lute.New without calling SetSanitizetrue, allowing raw HTML embedded in Markdown to pass through unmodified. The frontend then assigns the rendered HTML to innerHTML without any...
CVE-2026-33066
creationtimestamp| type| source ---|---|--- 2026-03-17 00:49:21+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-4663-4mpg-879v 2026-03-20 09:58:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhiawcd5np27 2026-04-17 03:38:28+00:00...
CVE-2025-33066 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
...
CVE-2025-33066 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
...
CVE-2025-33066
creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 18:00:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114660372228946198 2025-06-10 19:38:41+00:00| seen|...
CVE-2024-33066
Memory corruption while redirecting log file to any file location with any file name...
Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active Exploits
Qualcomm has rolled out security updates to address nearly two dozen flaws spanning proprietary and open-source components, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2024-43047 CVSS score: 7.8, has been described as a...
CVE-2024-33066
Memory corruption while redirecting log file to any file location with any file name...
CVE-2024-33066 Improper Input Validation in WLAN Resource Manager
Memory corruption while redirecting log file to any file location with any file name...
CVE-2023-33066
creationtimestamp| type| source ---|---|--- 2024-03-04 12:32:02+00:00| seen| https://t.me/ctinow/199193...
CVE-2023-33066
Memory corruption in Audio while processing RT proxy port register driver...
CVE-2023-33066 Use of Out-of-range Pointer Offset in Audio
Memory corruption in Audio while processing RT proxy port register driver...
CVE-2023-33066
CVE-2023-33066 describes a memory corruption in the Audio component of Qualcomm’s closed‑source stack, triggered while processing the RT proxy port register driver. The issue is linked to an out-of-range pointer offset in Audio (per VulnEnrichment), with Qualcomm’s March 2024 product-security bul...
CVE-2023-33066 Use of Out-of-range Pointer Offset in Audio
Memory corruption in Audio while processing RT proxy port register driver...
