1113 matches found
CVE-2026-121446
svg-sanitizer from 0.5.0 before 1.1.0 contains an incomplete filtering vulnerability that allows attackers to bypass remote URL removal by using CSS escape sequences inside url in SVG presentation attributes. Attackers can supply SVG files with attributes like fill containing escaped slashes that...
CVE-2026-121446
The svg-sanitizer library (versions 0.5.0 to before 1.1.0) contains an incomplete filtering vulnerability in SVG presentation attributes. Attackers can bypass remote URL removal by using CSS escape sequences inside the url() function. By providing SVG files with attributes like fill containing es...
EUVD-2026-115868
svg-sanitizer from 0.5.0 before 1.1.0 contains an incomplete filtering vulnerability that allows attackers to bypass remote URL removal by using CSS escape sequences inside url in SVG presentation attributes. Attackers can supply SVG files with attributes like fill containing escaped slashes that...
CVE-2026-120061
The psqlODBC parser for ODBC escape sequences in application SQL text writes the argument offsets of a fn escape into a fixed 16-entry stack array without a bound and does not initialize the array. An escape with too many arguments overflows the stack, and a reference to an unsupplied argument...
CVE-2026-121446: darylldoyle svg-sanitizer: svg-sanitizer from 0.5.0 before 1.1.0 contains an incomplete filtering vulnerability that allows attackers to bypass…
svg-sanitizer from 0.5.0 before 1.1.0 contains an incomplete filtering vulnerability that allows attackers to bypass remote URL removal by using CSS escape sequences inside url in SVG presentation attributes. Attackers can supply SVG files with attributes like fill containing escaped slashes that...
DEBIAN-CVE-2026-120061
The psqlODBC parser for ODBC escape sequences in application SQL text writes the argument offsets of a fn escape into a fixed 16-entry stack array without a bound and does not initialize the array. An escape with too many arguments overflows the stack, and a reference to an unsupplied argument...
CVE-2026-120061
The psqlODBC parser for ODBC escape sequences in application SQL text writes the argument offsets of a fn escape into a fixed 16-entry stack array without a bound and does not initialize the array. An escape with too many arguments overflows the stack, and a reference to an unsupplied argument...
EUVD-2026-115374
The psqlODBC parser for ODBC escape sequences in application SQL text writes the argument offsets of a fn escape into a fixed 16-entry stack array without a bound and does not initialize the array. An escape with too many arguments overflows the stack, and a reference to an unsupplied argument...
Linux Distros Unpatched Vulnerability : CVE-2026-120061
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The psqlODBC parser for ODBC escape sequences in application SQL text writes the argument offsets of a fn escape into a fixed 16-entry stack array without a bou...
PT-2026-135651
The psqlODBC parser for ODBC escape sequences in application SQL text writes the argument offsets of a fn escape into a fixed 16-entry stack array without a bound and does not initialize the array. An escape with too many arguments overflows the stack, and a reference to an unsupplied argument...
boa-cve-2009-4496-analysis
CVE-2009-4496 — Defensive Vulnerability Analysis Overview This repository documents a defensive analysis of CVE-2009-4496 , a historical vulnerability associated with the Boa web server. The objective of this project is to examine the vulnerability from a defensive security perspective through:...
CVE-2024-36039_PoC
CVE-2024-36039: PyMySQL Object Injection to SQL Injection PoC A complete, reproducible Proof of Concept PoC laboratory for CVE-2024-36039 , demonstrating how an Object Injection vulnerability in PyMySQL versions = 1.1.0 can be escalated to a full SQL Injection using MariaDB's ODBC Escape Sequence...
CVE-2026-48813-POC
Flawfinder-ANSI-Exploit-POC In version 2.0.19 of Flawfinder, no filename sanitization occurs when parsing possibly malicious filenames. Known affected terminals are libvte based, and the example below shows a mate-terminal. This exploit has since been fixed in version 2.0.20 as of 5/17/26 by Davi...
ace-vim-neovim
ace-vim-neovim Vim/Neovim Arbitrary Code Execution via Modelines CVE-2019-12735 Usage 1. listen nc -vlp 9999 2. ace vim pocshell.txt And then, your localhost will get shell...
CLEANSTART-2026-LR68789 kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal
Security vulnerability affects the nodetaint package. kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal...
CVE-2026-114728
A flaw was found in Roundcube Webmail. The HTML message sanitizer fails to properly normalize all valid CSS escape sequences when inspecting external resource attributes. A remote attacker can exploit this flaw by sending a crafted email that bypasses remote content blocking, causing external...
CVE-2026-54162 Ember: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUI
Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, interactive TUI row formatters pass Caddy access-log fields, particularly the request URI, through the fitCellLeft render helper without neutralizing terminal escape or control sequences. An...
CVE-2026-54162 Ember: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUI
Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, interactive TUI row formatters pass Caddy access-log fields, particularly the request URI, through the fitCellLeft render helper without neutralizing terminal escape or control sequences. An...
CVE-2026-54162 Ember: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUI
Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, interactive TUI row formatters pass Caddy access-log fields, particularly the request URI, through the fitCellLeft render helper without neutralizing terminal escape or control sequences. An...
CVE-2026-54162
The Ember real-time terminal dashboard (prior to v1.4.2 ) contains an unneutralized terminal escape sequence vulnerability (CWE-150 ). The application's interactive TUI row formatters pass fields from Caddy access logs—specifically the request URI —through the fitCellLeft render helper without ne...