cangibrina

root@kitploit: / | | | | / | ' \ / | | ' | '| | ' \ / | | || | | | | | | | | | | | | | | | | | | \,|| ||, ||./|| ||| ||,| |/ Beta - v0.8.7 Dashboard Finder English Português English Dashboard Finder Cangibrina is a multi platform tool which aims to obtain the admin Dashboard of sites using...

bleach

Bleach 注意：2026-06-05：Bleach 已不再维护。未来将不会发布任何版本，包括安全问题的修复。 参见 Issue： Bleach 是一个基于允许列表的 HTML 清洗库，用于转义或去除标记和属性。 Bleach 还可以安全地将文本转换为链接，应用 Django 的 urlize 过滤器无法处理的过滤，并可选地设置 rel 属性，即使文本中已存在链接也是如此。 Bleach 旨在清洗来自不可信 来源的文本。如果您发现自己煞费苦心地让网站管理员做很多事情，那么您可能已经超出了使用场景。要么信任这些用户，要么不要。 由于它依赖于 html5lib，Bleach 在处理怪异、古...

CVE-2026-19913

The Kaltura HTML5 player mwEmbed / html5lib contains a local file disclosure vulnerability due to improper validation of the ServiceUrl parameter in mwEmbedLoader.php. This parameter is used as the base URL for a backend request and accepts non‑HTTP schemes such as file://. When an exception or...

CVE-2026-19913

The Kaltura HTML5 player (mwEmbed / html5lib) contains an unauthenticated arbitrary file read vulnerability in the mwEmbedLoader.php endpoint. The ServiceUrl parameter accepts non-HTTP schemes such as file://; the KalturaClientBase PHP client fetches the data and passes it to unserialize() withou...

EUVD-2026-65614

The Kaltura HTML5 player mwEmbed / html5lib contains an unauthenticated remote code execution vulnerability caused by unsafe data deserialization and unsanitized filesystem path construction. mwEmbedLoader.php accepts a user‑controlled ServiceUrl, whose response is passed to unserialize, and the...

Remote Code Execution and Arbitrary File Read Vulnerabilities in Kaltura Servers

Overview The Kaltura HTML5 Player V2 Library mwEmbed / html5lib contains two vulnerabilities, both involving the same insecure deserialization flaw, that enable arbitrary file read and remote code execution. Affected versions include html5lib v2.45, v2.103 and earlier, and other v2.x releases tha...

11x-wagtail-blog (>=0.0.0, <=0.2.0), 5gasp-cli (>=0.1.0, <=0.4.0) +3300 more potentially affected by unknown CVE via html5lib (>=0.95.0, <=1.1.0)

html5lib PYPI version =0.95.0, =0.0.0, =0.1.0, =0.1.0, =0.10.0, =1.0.0, =3.30.15, =0.7.0, =0.2.0, =0.4.0, =0.4.11 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-HTML5LIB-17356104...

EUVD-2017-0060

Malware in sbrugna...

EUVD-2017-0061

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2016-9910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of special...

Linux Distros Unpatched Vulnerability : CVE-2016-9909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of the less than...

SUSE CVE-2016-9909

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of the less than character in attribute values...

SUSE CVE-2016-9910

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909...

GHSA-V9V9-XFFQ-RWR4 Improper Neutralization of Input During Web Page Generation in html5lib

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of the less than character in attribute values...

Improper Neutralization of Input During Web Page Generation in html5lib

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of the less than character in attribute values...

Cross-site Scripting in html5lib

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909...

GHSA-8F6M-GFQ9-G33V Cross-site Scripting in html5lib

The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting XSS attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909...

Mageia: Security Advisory (MGASA-2017-0001)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 30 Update: rubygem-loofah-2.2.3-4.fc30

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments. It's built on top of Nokogiri and libxml2, so it's fast and has a nice API. Loofah excels at HTML sanitization XSS prevention. It includes some nice HTML sanitizers, which are based on HTML5lib's...

[SECURITY] Fedora 31 Update: rubygem-loofah-2.2.3-4.fc31

Loofah is a general library for manipulating and transforming HTML/XML documents and fragments. It's built on top of Nokogiri and libxml2, so it's fast and has a nice API. Loofah excels at HTML sanitization XSS prevention. It includes some nice HTML sanitizers, which are based on HTML5lib's...