555936 matches found
EUVD-2026-56889
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw...
CVE-2026-73031 telegram-search Stored XSS via v-html in MessageList.vue
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw...
CVE-2026-73031 telegram-search Stored XSS via v-html in MessageList.vue
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw...
CVE-2026-73031
Telegram-search is affected by a stored XSS in MessageList.vue, where the highlightKeyword function passes raw message content to v-html without escaping. This allows an attacker to craft HTML-bearing messages in a shared Telegram group, enabling stored, cross-user JavaScript execution when users...
CVE-2026-73031 telegram-search Stored XSS via v-html in MessageList.vue
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw...
CVE-2026-73031
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw...
CVE-2026-68216
A flaw was found in the Linux kernel's pwc media driver. When the startstreaming function fails, it does not properly return queued buffers, leading to a resource leak. This can occur if the USB device is disconnected or if a mutex lock is interrupted. A local attacker could potentially exploit...
MAL-2026-13750 Malicious code in base65-77x (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef76e83f2641fcfacf488a6ef61447fac81f6a24cff6287b407a385374b9ddf7 The package impersonates base-x name, description, keywords, and homepage copied from base-x and patches the advertised decode function in both the...
Malicious code in base65-77x (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef76e83f2641fcfacf488a6ef61447fac81f6a24cff6287b407a385374b9ddf7 The package impersonates base-x name, description, keywords, and homepage copied from base-x and patches the advertised decode function in both the...
MAL-2026-13749 Malicious code in base65-33x (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e22e29bf42b32b80c5336d5f38d10d96879c84f162d86565289b588253589b Package name resembles the popular base-x encoder/decoder. The exported decodestring function in both CJS and ESM entrypoints POSTs its caller-suppli...
Malicious code in base65-33x (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e22e29bf42b32b80c5336d5f38d10d96879c84f162d86565289b588253589b Package name resembles the popular base-x encoder/decoder. The exported decodestring function in both CJS and ESM entrypoints POSTs its caller-suppli...
Malicious code in base65-15x (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fcb69b2f5c7e64ede8df36e3865dad82632ef076c6c2974b568727ec046062 base65-15x is a typosquat of the base-x package. Its decode function does not perform base decoding; instead it POSTs the caller-supplied string...
MAL-2026-13748 Malicious code in base65-15x (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fcb69b2f5c7e64ede8df36e3865dad82632ef076c6c2974b568727ec046062 base65-15x is a typosquat of the base-x package. Its decode function does not perform base decoding; instead it POSTs the caller-supplied string...
CVE-2026-68172
A flaw was found in the Linux kernel, specifically within the hugeptepget helper function for the arm64 architecture. When this function is provided with an unaligned virtual address, it can incorrectly process Page Table Entries PTEs. This can lead to the kernel dereferencing invalid memory...
CVE-2026-68164
A flaw was found in the Linux kernel's DAMON Data Access MONitor subsystem. The damonsetregions function, responsible for setting memory monitoring regions, incorrectly processes unsorted or overlapping input ranges due to a missing validation check. This can lead to unexpected behavior in DAMON...
CVE-2026-68209
A flaw was found in the Linux kernel's sun4i-csi media driver. When the startstreaming function fails, the vb2 framework does not properly return queued buffers, causing a buffer leak. This issue could lead to resource exhaustion and potentially a Denial of Service DoS condition on the affected...
CVE-2026-68237
A flaw was found in the Linux kernel's drm/amdgpu/userq component. During a GPU reset, the prereset function only force-completes fences for mapped queues. If a queue is in another state, its last fence remains pending and never signals after the reset. This can cause the eviction/suspend worker...
CVE-2026-68180
A flaw was found in the intelth Intel Trace Hub driver within the Linux kernel. This vulnerability occurs because the intelthoutputopen function acquires a device reference that is not properly released by the intelthmscrelease function when handling Message Signaled Interrupt MSC outputs...
CVE-2026-68184
A flaw was found in the Linux kernel's CD-ROM cdrom driver. When handling the CDROMVOLCTRL command, the mmcioctlcdromvolume function can perform an incorrect calculation of buffer length after a pointer adjustment. This leads to a stack out-of-bounds read, where 8 bytes of data beyond the intende...
CVE-2026-68256
A flaw was found in the drm/amd/display component of the Linux kernel. This issue occurs in the detectlinkandlocalsink function, where a prevsink reference is not properly released if the DisplayPort DP alt mode timeout path returns false. This missing cleanup can lead to a memory leak, potential...