4343 matches found
Arbitrary-File-Read-CVE-2024-24919
Arbitrary File Read CVE-2024-24919 Here is the alert received on the SIEM Firstly, what is CVE-2024-24919? Here is the description on the NIST website. After some more research, CVE-2024-24919 is a path traversal attack, which explains the request being made to the '/etc/passwd' directory. The...
UBUNTU-CVE-2026-99018
In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIGSHADOWCALLSTACK, handleexception reloads the kernel shadow call stack pointer gp only when the trap came from userspace. It made that decision with...
PT-2026-125510
DOMPurify from 3.4.4 before 3.4.17 contains a SAFE FOR TEMPLATES bypass that lets attackers preserve template expressions in attached shadow roots when using RETURN DOM, RETURN DOM FRAGMENT, or IN PLACE modes. Attackers can split expressions across text nodes separated by disallowed elements, whi...
DEBIAN-CVE-2026-99018
In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIGSHADOWCALLSTACK, handleexception reloads the kernel shadow call stack pointer gp only when the trap came from userspace. It made that decision with...
CVE-2026-99018
In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIGSHADOWCALLSTACK, handleexception reloads the kernel shadow call stack pointer gp only when the trap came from userspace. It made that decision with...
CVE-2026-99018
In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIGSHADOWCALLSTACK, handleexception reloads the kernel shadow call stack pointer gp only when the trap came from userspace. It made that decision with...
CVE-2026-99018
The Linux kernel contains a vulnerability under CONFIG_SHADOW_CALL_STACK where the handle_exception() function incorrectly uses the user-writable tp register to determine if a trap originated from userspace. An unprivileged user can manipulate tp to bypass the shadow call stack reload, causing th...
EUVD-2026-108812
In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIGSHADOWCALLSTACK, handleexception reloads the kernel shadow call stack pointer gp only when the trap came from userspace. It made that decision with...
CVE-2026-99018 riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp
In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIGSHADOWCALLSTACK, handleexception reloads the kernel shadow call stack pointer gp only when the trap came from userspace. It made that decision with...
CVE-2026-99018 riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp
In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIGSHADOWCALLSTACK, handleexception reloads the kernel shadow call stack pointer gp only when the trap came from userspace. It made that decision with...
CVE-2026-99018
In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIGSHADOWCALLSTACK, handleexception reloads the kernel shadow call stack pointer gp only when the trap came from userspace. It made that decision with...
PT-2026-121995
In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIG SHADOW CALL STACK, handle exception reloads the kernel shadow call stack pointer gp only when the trap came from userspace. It made that decision wit...
The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat
Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal systems, and works without anyone watching. Nobody reviewed its access. Nobody owns it. If an employee had that much reach with that little...
DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes
Summary When DOMPurify is configured with SAFEFORTEMPLATES: true together with a DOM-returning mode RETURNDOM: true, RETURNDOMFRAGMENT: true, or INPLACE: true, template expressions such as ..., $..., and survive sanitization inside the text content of an attached shadow root. The post-walk safety...
GHSA-CG2G-XH64-V4Q7 DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes
Summary When DOMPurify is configured with SAFEFORTEMPLATES: true together with a DOM-returning mode RETURNDOM: true, RETURNDOMFRAGMENT: true, or INPLACE: true, template expressions such as ..., $..., and survive sanitization inside the text content of an attached shadow root. The post-walk safety...
Cross-site Scripting (XSS)
Overview dompurify is a DOM-only XSS sanitizer for HTML, MathML and SVG. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the SAFEFORTEMPLATES sanitization path when combined with a DOM-returning mode RETURNDOM, RETURNDOMFRAGMENT, or INPLACE. Template expressions...
npm: DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes
npm: DOMPurify SAFEFORTEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes vulnerability discovered by ? in WordPress npm dompurify versions = 3.4.4, = 3.4.16...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
shadowphp Shadow-IT discovery and PHP2Shell CVE-2026-109618...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142504)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142504 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide shadow VMCS right after VMCLEAR freenested frees the shadow VMCS while vmcs01 sti...
CVE-2026-113110
A flaw was found in chromium-browser. A memory corruption issue exists within the browser's Shadow DOM component. A remote attacker could exploit this vulnerability by enticing a user to load a specially crafted HTML page, potentially allowing arbitrary code execution within the browser sandbox...