CVE-2006-3392

CVE-2006-3392 Description Webmin 1.290之前版本和Usermin 1.220之前版本在解码HTML之前调用了simplifypath函数，这允许远程攻击者读取任意文件，例如使用"..%01"序列，该序列绕过了在从文件名中移除"%01"等字节之前对"../"序列的移除。注意：这是与CVE-2006-3274不同的问题。 Execution root@kitploit: $ python3 CVE-2006-3392.py -u http://127.0.0.1:10000 / \ \ / / | | \ / \ / \ / / | \ \ / \ \ |...

CVE-2006-3392

CVE-2021-42913 Webmin 1.290 以前と Usermin 1.220 以前は、HTML をデコードする前に simplifypath 関数を呼び出します。これにより、リモートの攻撃者が任意のファイルを読み取ることができます。"..%01" シーケンスを使用して実証されているように、"%01" などのバイトがファイル名から削除される前に "../" シーケンスの除去をバイパスします。...

CVE-2026-73628

Serendipity versions = 2.3.5 and . In include/functionsrouting.inc.php serveSearch, the sanitisation pipeline runs urldecode after HTML-encoding, so a single URL-encoded HTML payload survives striptags and htmlspecialchars and is then decoded back into live HTML in the page. A crafted search link...

CVE-2025-62380

Mailgen (Node.js) versions up to 2.0.31 expose an HTML injection/XSS risk in plaintext output generated by generatePlaintext. The plaintext cleaning code strips HTML tags with a regex, decodes HTML entities, and then replaces decoded content; however, HTML tags containing certain Unicode line sep...

Fedora 39 : roundcubemail (2024-a591b4dc74)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-a591b4dc74 advisory. Release 1.6.7 - Makefile: Use phpDocumentor v3.4 for the Framework docs 9313 - Fix bug where HTML entities in URLs were not decoded on HTML to plain text...

Lavarel-Security XSS Filter Bypass Vulnerability

Lavarel-Security cross site scripting filter suffers from a bypass vulnerability. Product: Lavarel-Security XSS Filter Bypass Vulnerability: Mutation Based XSS Bypass Impact: Medium/High Authors: Rafay Baloch Company: RHAinfoSEC Website: http://rhainfosec.com Status: Fixed ========= Description...

Internet Explorer HTML Decoding Memory Corruption (CVE-2006-2382)

Microsoft Internet Explorer IE is the most widely used web browser application. The browser supports various languages as well as most of the known character sets. Character sets define the character encoding used in an HTML page. Languages that have more characters than the ASCII set defines nee...

TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption

TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption http://dvlabs.tippingpoint.com/advisory/TPTI-07-06 May 2, 2007 -- CVE ID: CVE-2007-2418 -- Affected Vendor: Cerulean Studios -- Affected Products: Trillian Pro 3.1 build 121 and below -- TippingPointTM IPS Customer Protection:...

CVE-2006-3392

CVE-2006-3392 affects Webmin (pre-1.290) and Usermin (pre-1.220). The issue arises when the server’s miniserv.pl sanitization path uses the simplify_path function before HTML decoding, allowing a remote attacker to read arbitrary files via specially crafted URLs (eg, using ..%01 sequences that b...

CVE-2006-2382

Heap-based buffer overflow in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via crafted UTF-8 encoded HTML that results in size discrepancies during conversion to Unicode, aka "HTML Decoding Memory Corruption Vulnerability."...

CVE-2006-2382

CVE-2006-2382 (HTML Decoding Memory Corruption Vulnerability) affects Microsoft Internet Explorer 5.01 SP4, 6 SP1 and earlier. It is a heap-based memory corruption flaw in decoding UTF-8 HTML, caused by a miscalculation of memory sizes when translating UTF-8 characters to Unicode, which could all...