Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

66 matches found

Friends Of PHP
Friends Of PHP•added 1970/01/01 12:00 a.m.•17 views

CVE-2026-48760: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defense

More info at https://symfony.com/cve-2026-48760...

6.1CVSS5.8AI score0.00338EPSS
SaveExploits0Affected Software1
Friends Of PHP
Friends Of PHP•added 1970/01/01 12:00 a.m.•23 views

CVE-2026-45064: HtmlSanitizer URL Attributes Pass Through BiDi Override Characters → Visual href Spoofing

More info at https://symfony.com/cve-2026-45064...

6.1CVSS5.8AI score0.00338EPSS
SaveExploits0Affected Software1
Friends Of PHP
Friends Of PHP•added 1970/01/01 12:00 a.m.•19 views

CVE-2026-48760: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defense

More info at https://symfony.com/cve-2026-48760...

6.1CVSS5.8AI score0.00338EPSS
SaveExploits0Affected Software1
Friends Of PHP
Friends Of PHP•added 1970/01/01 12:00 a.m.•15 views

CVE-2026-45064: HtmlSanitizer URL Attributes Pass Through BiDi Override Characters → Visual href Spoofing

More info at https://symfony.com/cve-2026-45064...

6.1CVSS5.8AI score0.00338EPSS
SaveExploits0Affected Software1
Friends Of PHP
Friends Of PHP•added 1970/01/01 12:00 a.m.•14 views

CVE-2026-45753: HtmlSanitizer UrlAttributeSanitizer Omits action/formaction/poster/cite: javascript: URI Survives Sanitization (XSS)

More info at https://symfony.com/cve-2026-45753...

6.1CVSS5.8AI score0.00338EPSS
SaveExploits0Affected Software1
Friends Of PHP
Friends Of PHP•added 1970/01/01 12:00 a.m.•24 views

CVE-2026-45066: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URL-Parser Differentials and <area> Misclassification

More info at https://symfony.com/cve-2026-45066...

6.1CVSS5.8AI score0.00338EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder