119029 matches found
[SECURITY] Fedora 45 Update: perl-HTML-Query-0.09-2.fc45
The HTML::Query module is an add-on for the HTML::Tree module set. It provides a simple way to select one or more elements from a tree using a query syntax inspired by jQuery. This selector syntax will be reassuringly familiar to anyone who has ever written a CSS selector...
[SECURITY] Fedora 45 Update: rust-astral-html-0.0.3-1.fc45
A high-performance HTML parser designed for document traversal...
CVE-2025-25296
CVE-2025-25296 Proof of Concept POC Description This project demonstrates a Proof of Concept POC for the CVE-2025-25296 vulnerability affecting Label Studio, an open-source data labeling tool. The vulnerability resides in the /projects/upload-example endpoint, which fails to sanitize user-provide...
SUSE CVE-2026-119261
Buffer overflow in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-119262
Out of bounds write in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-119272
Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
httprobe
httprobe Take a list of domains and probe for working http and https servers. Install ▶ go install github.com/tomnomnom/httprobe@latest Basic Usage httprobe accepts line-delimited domains on stdin: ▶ cat recon/example/domains.txt example.com example.edu example.net ▶ cat recon/example/domains.txt...
leaflet-cve-2025-69993
CVE-2025-69993 — XSS in Leaflet bindPopup Cross-Site Scripting vulnerability in Leaflet = 1.9.4. The bindPopup method renders user-supplied input as raw HTML without sanitization, allowing arbitrary JavaScript execution. Repository Structure ADVISORY.md — Full security advisory with vulnerability...
CVE-2022-30781
🍵 CVE-2022-30781 Gitea repository migration remote command execution exploit. How to use 1. Run an HTTP filesystem server with the files in this repository. 2. Edit the command to be exeucted in api/v1/repos/e99/exp/pulls/1/index.html L96. 3. Migrate remote repository with URL http:///e99/exp on...
CLEANSTART-2024-DM47223 Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities
Security vulnerability affects the librewolf package. Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these entities...
CLEANSTART-2024-CC28540 When a JavaScript URL (javascript:) is evaluated and the result is a string, this string is parsed to create an HTML document, which is then presented
Security vulnerability affects the librewolf package. When a JavaScript URL javascript: is evaluated and the result is a string, this string is parsed to create an HTML document, which is then presented...
CLEANSTART-2024-SL56993 Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers
Security vulnerability affects the librewolf package. Firefox's HTML parser did not correctly interpret HTML comment tags, resulting in an incongruity with other browsers...
CLEANSTART-2024-DH07611 HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use></code> tags; however it incorrectly did not sanitize <code>xlink:href</code> attributes
Security vulnerability affects the librewolf package. The HTML Sanitizer should have sanitized the href attribute of SVG use tags; however it incorrectly did not sanitize xlink:href attributes...
Chromium: CVE-2026-118317 Memory corruption in HTML
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
django-xss-example
Local Testing Works only on Linux. On Windows, one of the dependencies may cause an error. Before running, you need to install the following packages: pip install -r requirements.txt Make sure the packages are installed python -m django --version pip install django==4.0.1 grammarinator-generate...
CLEANSTART-2026-DI40972 lxml is a library for processing XML and HTML in the Python language
CVE-2021-43818 affects multiple packages. lxml is a library for processing XML and HTML in the Python language. See references for individual vulnerability details...
CVE-2023-49052
CVE-2023-49052 - Microweber CMS v2.0.4 - Uploading Malicious Files Description In version 2.0.4 of Microweber CMS where the file upload option is active in created forms, it is possible to send malicious HTML files, even when certain types of validations are applied in this field. This...
CLEANSTART-2026-QI80412 Actions which insert URLs into the content attribute of HTML meta tags are not escaped
CVE-2026-27142 affects multiple packages. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. See references for individual vulnerability details...
CLEANSTART-2026-DH16074 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree
CVE-2026-42506 affects multiple packages. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. See references for individual vulnerability details...
CLEANSTART-2026-CU64342 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree
CVE-2026-42502 affects multiple packages. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. See references for individual vulnerability details...