EUVD-2026-53388

Ghost is a Node.js content management system. From 6.26.0 until 6.54.1, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result i...

CVE-2026-53388

creationtimestamp| type| source ---|---|--- 2026-07-20 04:55:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116950519672202204...

DEBIAN-CVE-2026-53388

In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fusetrymovefolio unlocks the request on entry but does not re-lock it on the success path. This means fusechanabort can end the request and free the fuseioargs eg...

UBUNTU-CVE-2026-53388

In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fusetrymovefolio unlocks the request on entry but does not re-lock it on the success path. This means fusechanabort can end the request and free the fuseioargs eg...

Linux Distros Unpatched Vulnerability : CVE-2026-53388

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: re-lock request before replacing page cache folio fusetrymovefolio unlocks the request on entry but does not re-lock it on the success path. This means...

EUVD-2025-53388

Malicious code in main-gray-boar npm...

SUSE CVE-2023-53388

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Clean dangling pointer on bind error path mtkdrmbind can fail, in which case drmdevput is called, destroying the drmdevice object. However a pointer to it was still being held in the private object, and that pointer...

CVE-2023-53388

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Clean dangling pointer on bind error path mtkdrmbind can fail, in which case drmdevput is called, destroying the drmdevice object. However a pointer to it was still being held in the private object, and that pointer...

CVE-2023-53388

creationtimestamp| type| source ---|---|--- 2025-09-18 13:46:10+00:00| seen| Telegram/K2w8QuSNEVx0BhWCNnfYYgT1D2SS3gpQiQObSquFl1Z0Lk0...

CVE-2025-53388

creationtimestamp| type| source ---|---|--- 2025-06-28 05:16:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsnfmvucc72k...

CVE-2024-53388

A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element...

CVE-2024-53388

creationtimestamp| type| source ---|---|--- 2025-03-03 19:44:09+00:00| seen| https://t.me/cvedetector/19381 2025-03-04 16:31:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6383...

CVE-2024-53388

A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element...

CVE-2024-53388

The CVE-2024-53388 entry describes a DOM Clobbering vulnerability in the Mavo project, specifically version v0.3.2, where an attacker can cause arbitrary code execution by supplying a crafted HTML element. This is corroborated across multiple connected records (Red Hat, GitHub GHSA advisory, OSV,...

PHP CGI Query String Parameters Command Execution

Added: 05/15/2012 CVE: CVE-2012-1823 BID: 53388 OSVDB: 81633 Background PHP is a widely used general-purpose scripting language that is especially suited for Web development. Problem When configured as a CGI script aka php-cgi, PHP does not properly handle query string parameters which are passed...