CVE-2026-103087

Uncontrolled recursion in the Gosub browser engine gosub-engine through 0.1.0 and main before commit 46868b3 allows a remote attacker to cause a Denial of Service stack exhaustion and application crash via an SVG document containing an excessive number of deeply nested elements. Because the engin...

CVE-2026-103087: Uncontrolled Recursion

Uncontrolled recursion in the Gosub browser engine gosub-engine through 0.1.0 and main before commit 46868b3 allows a remote attacker to cause a Denial of Service stack exhaustion and application crash via an SVG document containing an excessive number of deeply nested elements. Because the engin...

EUVD-2010-4026

Malware in sbrugna...

EUVD-2006-6609

Malware in sbrugna...

EUVD-2015-9152

Malware in sbrugna...

EUVD-2017-6400

Malware in sbrugna...

EUVD-2017-6401

Malware in sbrugna...

EUVD-2017-6402

Malware in sbrugna...

EUVD-2018-0469

Malware in sbrugna...

EUVD-2018-6317

Malware in sbrugna...

EUVD-2018-20583

Malware in sbrugna...

EUVD-2006-0848

Malware in sbrugna...

EUVD-2018-10092

Malware in sbrugna...

EUVD-2006-2966

Malware in sbrugna...

EUVD-2022-44553

Malicious code in bioql PyPI...

CVE-2025-46198: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in grav v.1.7.48, v.1.7.47 and v.1.7.46 allows an attacker to execute arbitrary code via the onerror attribute of the img element...

BIT-MOODLE-2024-28593

The Chat activity in Moodle 4.3.3 allows students to insert a potentially unwanted HTML A element or IMG element, or HTML content that leads to a performance degradation. NOTE: the vendor's UsingChat page says "If you know some HTML code, you can use it in your text to do things like insert image...

SUSE CVE-2015-0810

Mozilla Firefox before 37.0 on OS X does not ensure that the cursor is visible, which allows remote attackers to conduct clickjacking attacks via a Flash object in conjunction with DIV elements associated with layered presentation, and crafted JavaScript code that interacts with an IMG element...

CVE-2022-37307

OX App Suite through 7.10.6 allows XSS via XHTML CDATA for a snippet, as demonstrated by the onerror attribute of an IMG element within an e-mail signature...

Cross site scripting

OX App Suite through 7.10.6 allows XSS via XHTML CDATA for a snippet, as demonstrated by the onerror attribute of an IMG element within an e-mail signature...