Trend Micro Cleaner One Pro Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Cleaner One Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exist...

PT-2026-22855

Name of the Vulnerable Software and Affected Versions Trend Micro Cleaner One Pro affected versions not specified Description Trend Micro Cleaner One Pro installations are susceptible to a denial-of-service condition. A local attacker can exploit this issue, potentially leading to low-privileged...

GHSA-XVP8-3MHV-424C lxml-html-clean has <base> tag injection through default Cleaner configuration

Summary The tag passes through the default Cleaner configuration. While pagestructure=True removes html, head, and title tags, there is no specific handling for , allowing an attacker to inject it and hijack relative links on the page. Details The tag is not currently in the pagestructure kill se...

lxml-html-clean has <base> tag injection through default Cleaner configuration

Summary The tag passes through the default Cleaner configuration. While pagestructure=True removes html, head, and title tags, there is no specific handling for , allowing an attacker to inject it and hijack relative links on the page. Details The tag is not currently in the pagestructure kill se...

Improper Encoding or Escaping of Output

Overview lxml-html-clean is a HTML cleaner from lxml project Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output in the default Cleaner configuration due to the incomplete pagestructure kill set that does not account for tags outside tags. An attacker can...

Cleaner Compute: Akamai Adds 128 MW of Renewable Energy to the Grid

...

Fiber path traversal vulnerability

Fiber is an open-source web framework written in Go. Versions of Fiber v3 and earlier have a path traversal vulnerability. This vulnerability arises from the possibility of bypassing the static middleware cleaner, which may lead to the reading of arbitrary files on the Windows server file system...

CVE-2020-37198

Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by injecting an oversized buffer into the license key field. Attackers can generate a 6000-byte payload and paste it into the license activation field to trigger an application...

CVE-2020-37198 Duplicate Cleaner Pro 4 - Denial of Service

Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by injecting an oversized buffer into the license key field. Attackers can generate a 6000-byte payload and paste it into the license activation field to trigger an application...

CVE-2020-37198 Duplicate Cleaner Pro 4 - Denial of Service

Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by injecting an oversized buffer into the license key field. Attackers can generate a 6000-byte payload and paste it into the license activation field to trigger an application...

CVE-2020-37198

CVE-2020-37198 affects Duplicate Cleaner Pro 4.1.3. The vulnerability is a denial of service caused by injecting an oversized buffer into the license key field, with a demonstrated 6000-byte payload that can be pasted into the license activation field to crash the application. Public sources in c...

CVE-2020-37198

Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by injecting an oversized buffer into the license key field. Attackers can generate a 6000-byte payload and paste it into the license activation field to trigger an application...

DigitalVolcano Duplicate Cleaner Pro has security vulnerabilities

DigitalVolcano Duplicate Cleaner Pro is a duplicate file cleaning tool developed by the British company DigitalVolcano. Version 4.1.3 of DigitalVolcano Duplicate Cleaner Pro contains a security vulnerability caused by a buffer overflow in the license key field, which may lead to the application...

CVE-2020-37198: Stack-based Buffer Overflow

Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by injecting an oversized buffer into the license key field. Attackers can generate a 6000-byte payload and paste it into the license activation field to trigger an application...

PT-2026-7696

Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by injecting an oversized buffer into the license key field. Attackers can generate a 6000-byte payload and paste it into the license activation field to trigger an application...

CVE-2026-0924 BuhoCleaner 1.15.2 - Local Privilege Escalation via PID reuse attack

BuhoCleaner contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via insecure functions.This issue affects BuhoCleaner: 1.15.2...

PT-2026-5707

Name of the Vulnerable Software and Affected Versions BuhoCleaner version 1.15.2 Description BuhoCleaner contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root. This is achieved through insecure functions within the XPC service. Recommendations...

appel-geocode (>=0.1.1, <=1.1.0), bamboo-lib (>=0.0.37, <=0.0.39) +3 more potentially affected by CVE-2025-69662 via geopandas (0.5.1)

geopandas PYPI version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on geopandas and may be impacted: - appel-geocode =0.1.1, =0.0.37, =0.0.1, =0.0.13 Source cves: CVE-2025-69662 Source advisory: OSV:GHSA-6497-PRX7-GPMQ...

data-cleaner (0.1.20) potentially affected by CVE-2025-69662 via geopandas (0.2.1)

geopandas PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on geopandas and may be impacted: - data-cleaner 0.1.20 Source cves: CVE-2025-69662 Source advisory: OSV:GHSA-6497-PRX7-GPMQ...

appel-geocode (>=0.1.1, <=1.1.0), bamboo-lib (>=0.0.37, <=0.0.39) +3 more potentially affected by CVE-2025-69662 via geopandas (0.5.1)

geopandas PYPI version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on geopandas and may be impacted: - appel-geocode =0.1.1, =0.0.37, =0.0.1, =0.0.13 Source cves: CVE-2025-69662 Source advisory: OSV:PYSEC-2026-62...