38 matches found
CVE-2026-105456
The RTIR extension for Request Tracker (RT) introduces a Stored XSS vulnerability due to a flawed HTML scrubber rule. The extension allows internal link placeholders but incorrectly permits any link containing that placeholder, including those using the javascript: scheme. This change affects the...
CVE-2026-105456 Stored XSS via HTML scrubber rule in RTIR
RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, not only to RTIR's own...
CVE-2026-105456 Stored XSS via HTML scrubber rule in RTIR
RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, not only to RTIR's own...
PT-2026-133623
RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, not only to RTIR's own...
CVE-2026-105456: Best Practical Solutions RT for Incident Response: RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that…
RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, not only to RTIR's own...
EUVD-2011-1408
Malware in sbrugna...
EUVD-2015-5617
Malware in sbrugna...
SUSE CVE-2015-5667
Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...
Fedora 23 : perl-HTML-Scrubber-0.15-1.fc23 (2015-84a95e39d4)
perl-HTML-Scrubber-0.15-1.fc21 - update to 0.15 perl-HTML- Scrubber-0.15-1.fc22 - update to 0.15 perl-HTML-Scrubber-0.15-1.fc23 - update to 0.15 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora 21 : perl-HTML-Scrubber-0.15-1.fc21 (2015-fed35dffd7)
perl-HTML-Scrubber-0.15-1.fc21 - update to 0.15 perl-HTML- Scrubber-0.15-1.fc22 - update to 0.15 perl-HTML-Scrubber-0.15-1.fc23 - update to 0.15 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora 22 : perl-HTML-Scrubber-0.15-1.fc22 (2015-95f5ff8d44)
perl-HTML-Scrubber-0.15-1.fc21 - update to 0.15 perl-HTML- Scrubber-0.15-1.fc22 - update to 0.15 perl-HTML-Scrubber-0.15-1.fc23 - update to 0.15 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Mageia: Security Advisory (MGASA-2015-0488)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2015-0488 Updated perl-HTML-Scrubber packages fix CVE-2015-5667
Updated perl-HTML-Scrubber package fixes security vulnerability: Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...
Updated perl-HTML-Scrubber packages fix CVE-2015-5667
Updated perl-HTML-Scrubber package fixes security vulnerability: Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment...
Amazon Linux: Security Advisory (ALAS-2015-629)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux AMI : perl-HTML-Scrubber (ALAS-2015-629)
Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment. C Tenable Network Security, Inc. The descriptive text and package checks in this plug...
Medium: perl-HTML-Scrubber
Issue Overview: Cross-site scripting XSS vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment. Affected Packages: perl-HTML-Scrubber Issue Correction: Run yum updat...
Fedora Update for perl-HTML-Scrubber FEDORA-2015-95
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 21 Update: perl-HTML-Scrubber-0.15-1.fc21
If you wanna "scrub" or "sanitize" html input in a reliable an flexible fashion, then this module is for you. I wasn't satisfied with HTML::Sanitizer because it is based on HTML::TreeBuilder, so I thought I'd write something similar that works directly with HTML::Parser...
[SECURITY] Fedora 22 Update: perl-HTML-Scrubber-0.15-1.fc22
If you wanna "scrub" or "sanitize" html input in a reliable an flexible fashion, then this module is for you. I wasn't satisfied with HTML::Sanitizer because it is based on HTML::TreeBuilder, so I thought I'd write something similar that works directly with HTML::Parser...