31444 matches found
CVE-2026-68749
Inefficient Regular Expression Complexity vulnerability in the CSS scrubber in rrrene htmlsanitizeex allows an unauthenticated remote attacker to exhaust server CPU via a long CSS declaration in sanitized HTML. The declaration regex in HtmlSanitizeEx.Scrubber.CSS.scrub/1 matches the property name...
CVE-2026-66370
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in the HTML5 scrubber in rrrene htmlsanitizeex allows an unauthenticated remote attacker to retarget a form already on the rendering page and receive whatever the victim submits, including credentials, via the form and formaction...
CVE-2026-58101
A flaw was found in Crypt::OpenSSL::X509, a Perl module for handling X.509 certificates. A remote attacker could exploit this vulnerability by presenting a malformed X.509 certificate. This could lead to a Denial of Service DoS by causing the Perl process to crash due to a NULL pointer dereferenc...
CVE-2026-58102
A flaw was found in Crypt::OpenSSL::X509. A remote attacker could exploit this vulnerability by providing a specially crafted certificate that includes an overly long Object Identifier OID in its extensions. During the processing of this certificate, the software incorrectly handles the OID lengt...
WordPress Podlove Podcast Publisher CVE-2026-13001 Detect
Detects Podlove Podcast Publisher = 4.5.1 vulnerable to unauthenticated file upload via image cache extension bypass CVE-2026-13001. Fixed in 4.5.2. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Podlove Podcast Publisher CVE-2026-13001 = 4.5.1.""" from kittysploit import from...
CVE-2026-18973
The CVE-2026-18973 entry concerns heshengtao super-agent-party (
EUVD-2026-53694
A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted element is the function sanitizeproxyurl of the file server.py of the component extensionproxy Route. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated...
CVE-2026-18973
A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted element is the function sanitizeproxyurl of the file server.py of the component extensionproxy Route. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated...
CVE-2026-18973 heshengtao super-agent-party extension_proxy Route server.py sanitize_proxy_url server-side request forgery
A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted element is the function sanitizeproxyurl of the file server.py of the component extensionproxy Route. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated...
CVE-2026-18973 heshengtao super-agent-party extension_proxy Route server.py sanitize_proxy_url server-side request forgery
A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted element is the function sanitizeproxyurl of the file server.py of the component extensionproxy Route. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated...
PT-2026-75980
Impact The Footnote extension records one backref per footnote reference and then appends the entire backref list for every footnote definition block in the document, without ever de-duplicating or removing repeated definitions of the same label GatherFootnotesListener, populated by...
CVE-2026-71488: Inefficient Algorithmic Complexity
league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially crafted Markdown lines can cause the parser to have quadratic time complexity when converting, because several parsing paths repeatedly rescan growing portions of a line to translat...
CVE-2026-19156: Heap-based Buffer Overflow
Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: High...
PT-2026-75966
Impact With the Attributes extension enabled, AttributesListener::findTargetAndDirection resolves each attribute node's target by walking outward through its siblings. For a run of N adjacent inline attribute blocks placed at the start of a block with nothing to their left, each node scans the...
PT-2026-68366
Name of the Vulnerable Software and Affected Versions heshengtao super-agent-party versions prior to 0.4.2 Description Remote attackers can trigger server-side request forgery SSRF by manipulating the url argument within the sanitize proxy url function located in the server.py file of the extensi...
PT-2026-68813
Name of the Vulnerable Software and Affected Versions league/commonmark versions 0.6.0 through 2.8.3 Description Specially crafted Markdown lines can cause the parser to exhibit quadratic time complexity during conversion. This occurs because several parsing paths repeatedly rescan growing portio...
PT-2026-68701
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.109 Description A heap buffer overflow exists in the Base component. This occurs when an attacker convinces a user to install a malicious extension, allowing the exploitation of heap corruption throug...
EulerOS 2.0 SP15 : xorg-x11-server (EulerOS-SA-2026-2915)
According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB X Keyboard Extension modifier map...
EulerOS 2.0 SP15 : xorg-x11-server (EulerOS-SA-2026-2956)
According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB X Keyboard Extension modifier map...