36490 matches found
EUVD-2026-78900
In Concrete CMS below version 9.5.3, the Address attribute's country-less text formatter skipped HTML-escaping, enabling stored XSS in Express association views. A user able to submit an Address attribute could execute script in the session of any dashboard user who opened the affected entry. The...
EEF-CVE-2026-77972 safeurl validated address is not bound to the request, allowing DNS rebinding
Summary Time-of-check Time-of-use TOCTOU Race Condition in Slab safeurl allows an attacker who controls a hostname's DNS responses to reach internal network destinations that validation rejected. Validation returns a verdict and not the address it approved, so the HTTP clients the library ships...
EUVD-2026-78803
FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX server's ResetGraphics PDU serializer that fails to initialize padding bytes in the fixed 340-byte wire format. Attackers can receive uninitialized heap memory including live pointers and GLib function...
CVE-2026-91946 FreeRDP before 3.31.0 Information Disclosure via RDPGFX ResetGraphics
FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX server's ResetGraphics PDU serializer that fails to initialize padding bytes in the fixed 340-byte wire format. Attackers can receive uninitialized heap memory including live pointers and GLib function...
Security update for 389-ds
This update for 389-ds fixes the following issue: CVE-2026-11785: type confusion in the SSO token handler can cause partial stack address information disclosure bsc1268065. Changes for 389-ds: Update to version 2.0.20git94.63d290b04: Issue 7774 - Add backport action 7775 Issue 7733 - Typo about...
CVE-2026-57140 PraisonAI AgentOS exposes unauthenticated agent listing and invocation
PraisonAI is a multi-agent teams system. From 1.6.0 until 1.7.2, AgentOS in src/praisonai-ts/src/os/agentos.ts uses the 0.0.0.0 default from src/praisonai-ts/src/os/config.ts and registers GET /api/agents and POST /api/chat without authentication middleware. A remote caller who can reach the...
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
CVE-2026-90711
proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions 1.1.0 through 2.0.7, a trust subnet written in IPv4-mapped IPv6 notation with an IPv4-sized prefix, such as ::ffff:10.0.0.0/8 instead of t...
CVE-2026-101912
creationtimestamp| type| source ---|---|--- 2026-09-15 04:15:05+00:00| published-proof-of-concept| https://github.com/beaugunderson/ip-address/security/advisories/GHSA-j6r3-76f7-8jcv 2026-09-30 04:30:31+00:00| seen| https://gist.github.com/alon710/695037b527e98708f813a603aa97604e 2026-09-30...
CVE-2026-101911
creationtimestamp| type| source ---|---|--- 2026-09-15 04:15:03+00:00| published-proof-of-concept| https://github.com/beaugunderson/ip-address/security/advisories/GHSA-h3mg-xc3c-68pw 2026-09-30 05:30:30+00:00| seen| https://gist.github.com/alon710/8432dbe3939654e0587f7004c91b9879 2026-09-30...
CLEANSTART-2026-GE74044 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...
Multiple security vulnerabilities affect the prometheus-node-exporter-fips package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. S...
CVE-2026-88742
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...
EUVD-2026-79298
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...
CVE-2026-88742
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...
CVE-2026-88742
Bacularis versions 1.0.0 through 6.5.0 are vulnerable to Stored cross-site scripting (XSS) . The vulnerability exists within the client address field , where improper neutralization of input during web page generation allows for script injection. Exploitation details are not provided in the docum...
CVE-2026-88742: Improper Neutralization of Input During Web Page Generation
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...
CVE-2026-81898: Improper Neutralization of Input During Web Page Generation
In Concrete CMS below version 9.5.3, the Address attribute's country-less text formatter skipped HTML-escaping, enabling stored XSS in Express association views. A user able to submit an Address attribute could execute script in the session of any dashboard user who opened the affected entry. The...
CVE-2026-77866: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF vulnerability in Slab safeurl allows an attacker who controls a validated URL to reach internal network destinations the library is configured to block. Only IPv4 addresses are matched against the reserved ranges and the blocklist. Every other address is treated a...
PT-2026-92180
Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 9.5.3 Description Stored Cross-Site Scripting XSS is possible in Express association views due to the Address attribute's country-less text formatter skipping HTML-escaping. This occurs when a non-required Addres...