CVE-2026-58228 Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>

Cross-site scripting vulnerability in phoenixframework phoenixliveview allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.validdestination!/2 and Phoenix.LiveView.Utils.validlivenavigationdestination!/2 functions in...

CVE-2026-58228 Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>

Cross-site scripting vulnerability in phoenixframework phoenixliveview allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.validdestination!/2 and Phoenix.LiveView.Utils.validlivenavigationdestination!/2 functions in...

R7-Officer document editor Path Traversal

Vulnerability of the document editor of the R7-Officer corporate server, with an exploit through a relative path. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Apache Tomcat Relative Path Bypass Code Execution

The vulnerability of the Apache Tomcat application server is related to the exploitation of relative path handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

JetBrains Rider Path Bypass

The vulnerability of the cross-platform integrated software development environment JetBrains Rider is related to the exploitation of a relative path. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain read, modify, or delete access to data...

Cisco Emergency Responder Access Bypass

The vulnerability in the web interface of the Cisco Emergency Responder server for emergency response management and monitoring involves bypassing a relative path. Exploiting this vulnerability allows an attacker operating remotely to gain read, modify, or delete access to data...