1962 matches found
EUVD-2026-69250
DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. It denies polymorphic resolution only for a fixed set of "unsafe base types", and its isSafeSubType method returns true...
CVE-2026-83609
xmldom (a pure JavaScript W3C XML DOM module) is vulnerable in versions 0.9.0 through 0.9.12 due to a flaw in lib/grammar.js. The shared reg() builder compiles the anchored QName_exact validator with the multiline flag , causing ^ and $ to validate only one line rather than the full name. As a re...
EUVD-2026-69063
A security flaw has been discovered in zhongyu09 OpenChatBI up to 0.3.0. Affected by this vulnerability is the function validatesqlsafety of the file openchatbi/text2sql/generatesql.py. Performing a manipulation results in sql injection. The attack can be initiated remotely. Versions v0.2.0 throu...
PHP Login System 2.0.1 - Cross-Site Scripting
msaad1999's PHP-Login-System 2.0.1 contains a reflected cross-site scripting caused by unsanitized input in 'validator' parameter in /reset-password, letting remote attackers execute arbitrary JavaScript in a user's browser, exploit requires attacker to craft malicious URL id: CVE-2023-38875 info...
CVE-2025-12758
CVE-2025-12758: Bypass del Selector de Variación Unicode en isLength de Validator.js ID de CVE: CVE-2025-12758 Puntuación CVSS: 8.7 ALTA Severidad: ALTA CWE: CWE-792 Filtrado incompleto de una o más instancias de elementos especiales Publicado: 26 de noviembre de 2025 Divulgado: 19 de octubre de...
hibernate__hibernate-validator_CVE-2019-10219_6_0_18_Final_fixed
Hibernate Validator Versión: 6.0.18.Final - 25-10-2019 ¿Qué es? Esta es la implementación de referencia de JSR-380 - Bean Validation 2.0. Bean Validation define un modelo de metadatos y una API para JavaBean, así como la validación de métodos. La fuente de metadatos por defecto son las anotacione...
arp-validator
arp-validator Herramienta de seguridad para detectar ataques de envenenamiento ARP Características Utiliza un enfoque más rápido en la detección de ataques de envenenamiento ARP en comparación con enfoques pasivos Detecta no solo la presencia de envenenamiento ARP sino también el mapeo IP-MAC...
CVE-2017-16995
Vulnerability Description Ubuntu is an open-source GNU/Linux operating system primarily used on desktops, based on Debian GNU/Linux. Recently, a white-hat hacker disclosed a local privilege escalation vulnerability in the latest version of Ubuntu Ubuntu 16.04, assigned CVE-2017-16995. This...
CVE-2026-82855
@hulumi/policies versions before 1.3.2 contain an evidence validation bypass in the Cloudflare and deployment-governance validators. Attackers can submit compliant evidence from unrelated resources—such as different zones, hostnames, origins, or repositories—to suppress violations for unrelated r...
hibernate__hibernate-validator_CVE-2019-10219_6-0-17-Final
Hibernate Validator Versión: 6.0.17.Final - 13-06-2019 ¿Qué es? Esta es la implementación de referencia de JSR-380 - Bean Validation 2.0. Bean Validation define un modelo de metadatos y una API para la validación de JavaBeans, así como la validación de métodos. La fuente de metadatos por defecto...
F5 Networks BIG-IP : NLnet Labs Unbound vulnerability (K000163139)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000163139 advisory. NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables...
F5 Networks BIG-IP : NLnet Labs Unbound vulnerability (K000163141)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000163141 advisory. NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator th...
CVE-2026-77184
In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW CREATE statements without complete escaping of backslash characters. A user with permission to modify a collection's schema validator, in...
CVE-2026-77184 MongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE Output
In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW CREATE statements without complete escaping of backslash characters. A user with permission to modify a collection's schema validator, in...
EUVD-2026-67779
In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW CREATE statements without complete escaping of backslash characters. A user with permission to modify a collection's schema validator, in...
MongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE Output
In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comment text of the DDL returned by SHOW CREATE statements without complete escaping of backslash characters. A user with permission to modify a collection's schema validator, in...
CVE-2026-77184
MongoDB Connector for BI is affected by an incomplete escaping flaw: the description text of a collection's JSON schema validator is incorporated into the comment text of DDL returned by SHOW CREATE statements without fully escaping backslash characters. An attacker with permission to modify a co...
CVE-2026-59641
A flaw was found in Bouncy Castle for Java. The S/MIME Secure/Multipurpose Internet Mail Extensions validator improperly trusts the signing time asserted by the signer during path validation. This could allow an attacker to bypass certificate path validation, potentially leading to the acceptance...
cosmicsting-validator
أداة Cosmicsting POC، مع سكربت bash للتحقق من جميع مواقعنا المستضافة لتأكيد تطبيق التصحيح. تم توفير هذا المستودع للسماح لأصحاب المتاجر / مزودي الاستضافة بتأكيد تطبيق التصحيح على المتاجر. داخل check.bash أضف النطاقات إلى قائمة SITES. https://www.sdj.pw/posts/magento2-cosmic-sting-check/ المدقق عبر...
