CLEANSTART-2026-WT34368 When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n

Security vulnerability affects the kedacore-http-add-on package. When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n...

CLEANSTART-2026-YN60892 When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n

CVE-2026-78661 affects multiple packages. When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n. See references for individual vulnerability details...

CLEANSTART-2026-GO88619 When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n

Security vulnerability affects the prometheus package. When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n...

CLEANSTART-2026-FA45918 When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n

Security vulnerability affects the prometheus package. When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n...

CVE-2026-78661 Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net

When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...

CVE-2026-78661

The golang.org/x/net package is vulnerable to a quadratic complexity issue (CWE-407) when coalescing adjacent text nodes via the addText and fosterParent functions. The root cause is that appending to an existing TextNode's data using string concatenation (n.Data += text) triggers a reallocation ...

Apple Safari TextNode Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

libxml2: Buffer overread with HTML parser in push mode in xmlSAX2TextNode

A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to leak potentially sensitive information...

Hacking Team Android browser attacks during the vulnerability analysis Stage3-vulnerability warning-the black bar safety net

A, vulnerability introduction: Hacking team of the year broke out for android4. 0. x-4.3. x android browser vulnerabilities to attack the use of the code. The exploit code, by successive use of a plurality of browser and kernel vulnerabilities, is done through Javascript to the virtual memory wri...

Microsoft Internet Explorer textNode Use-After-Free

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Microsoft Internet Explorer - textNode Use-After-Free (MS13-037) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS13-037 Microsof...

Integer overflow

Object linking and embedding OLE Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac, and Visual Basic 6.0 allows remote attackers to execute arbitrary code via the substringData method on a TextNode object, which causes an integer overflow that...

CVE-2007-2224: Improper Restriction of Operations within the Bounds of a Memory Buffer

Object linking and embedding OLE Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac, and Visual Basic 6.0 allows remote attackers to execute arbitrary code via the substringData method on a TextNode object, which causes an integer overflow that...

Microsoft Internet Explorer substringData Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of various Microsoft software User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the substringData method available ...

CVE-2007-2223: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft XML Core Services MSXML 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a 1 TextNode or 2 XMLDOM object, which causes an integer overflow that leads to a buffer overflow...