CVE-2026-8661

CVE-2026-8661 affects the Rapid7 InsightConnect Markdown Plugin (Linux) up to version 3.1.4. The vulnerability is in the markdown_to_pdf action and combines Server-Side Scripting (XSS) with Server-Side Request Forgery (SSRF). It allows remote attackers to execute JavaScript server-side and to tri...

CVE-2025-8661

creationtimestamp| type| source ---|---|--- 2025-08-11 07:58:13+00:00| seen| Telegram/VuJnJ6s-WEjj34joGZfccHIgpOYY-bKhop0TF5RGK3RBI...

CVE-2024-8661

Concrete CMS versions 9.0.0 to 9.3.3 and below 8.5.19 are vulnerable to Stored XSS in the "Next Nav" block. A rogue administrator could add a malicious payload by executing it in the browsers of targeted users. The Concrete CMS Security Team gave this vulnerability a CVSS v4 score of 4.6 with...

CVE-2019-8661

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.6. A remote attacker may be able to cause arbitrary code execution...

CVE-2024-8661

creationtimestamp| type| source ---|---|--- 2024-09-16 21:12:56+00:00| seen| https://t.me/cvedetector/5752...

Photon OS 1.0: Envoy PHSA-2020-1.0-0290

An update of the envoy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0290. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136105...

Photon OS 2.0: Envoy PHSA-2020-2.0-0229

An update of the envoy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0229. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135867...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security update

Red Hat OpenShift Service Mesh 1.0.9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

CVE-2020-8661

CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests...

CVE-2020-8661

CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests...

CVE-2020-8661

CVE-2020-8661 affects Envoy (via Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy). The Red Hat advisory RHSA-2020:0734 lists CVE-2020-8661 among fixes and describes mitigations for multiple envoy issues; the vulnerability is mapped to excessive CPU/memory use when proxying HTTP/1.1, which ...

CVE-2019-8661

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.6. A remote attacker may be able to cause arbitrary code execution...

CVE-2019-8661

CVE-2019-8661 is a macOS Mojave (10.14.x) issue fixed in 10.14.6. It describes a use-after-free in NSURL initWithCoder during deserialization of bookmark/alias data (Mac path via CarbonCore), which can lead to memory corruption and remote code execution. Apple/Apple Support entries indicate the f...

CVE-2019-8661

creationtimestamp| type| source ---|---|--- 2019-08-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47207...

About the security content of macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra

About the security content of macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra This document describes the security content of macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. About Apple security updates For o...

Debian: Security Advisory (DLA-1611-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-8661

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way affected Microsoft scripting engines render when handling objects in memory, aka "Microsoft Edge Memory Corruption Vulnerabilit...

CVE-2017-8661

CVE-2017-8661 is a remote-code-execution vulnerability in the Microsoft Edge scripting engine and related Windows scripting components. The issue arises from memory handling of objects in memory, allowing an attacker to run arbitrary code in the context of the current user if a user visits a spec...

Microsoft Edge CVE-2017-8661 Scripting Engine Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Faile...

CVE-2016-8661

Little Snitch version 3.0 through 3.6.1 suffer from a buffer overflow vulnerability that could be locally exploited which could lead to an escalation of privileges EoP and unauthorised ring0 access to the operating system. The buffer overflow is related to insufficient checking of parameters to t...