CVE-2026-66921 Pivotick - Stored DOM-Based Cross-Site Scripting via Unescaped Markdown Node References

Pivotick’s Markdown node-reference renderer failed to HTML-escape the attacker-controlled nodeName value before interpolating it into both the data-node-name attribute and the body of a generated element. Because the node-reference tokenizer rejected only square brackets, a crafted node name coul...

PT-2026-65484

Pivotick’s Markdown node-reference renderer failed to HTML-escape the attacker-controlled nodeName value before interpolating it into both the data-node-name attribute and the body of a generated element. Because the node-reference tokenizer rejected only square brackets, a crafted node name coul...

EUVD-2010-2668

Malware in sbrugna...

CVE-2010-2664

Opera before 10.60 allows remote attackers to cause a denial of service application hang via certain HTML content that has an unclosed SPAN element with absolute positioning...

Design/Logic Flaw

Opera before 10.60 allows remote attackers to cause a denial of service application hang via certain HTML content that has an unclosed SPAN element with absolute positioning...

CVE-2010-2664: Undefined Security Weakness

Opera before 10.60 allows remote attackers to cause a denial of service application hang via certain HTML content that has an unclosed SPAN element with absolute positioning...