31176 matches found
GDTaller 跨站脚本漏洞
GDTaller is a digital certificate and electronic seal management system developed by the Spanish company GDTaller. GDTaller has a cross-site scripting vulnerability, which stems from the site parameter in the applogin.php file. Attackers can send victims a URL containing malicious scripts, causin...
PT-2026-28283
Name of the Vulnerable Software and Affected Versions GDTaller affected versions not specified Description Reflected Cross Site Scripting XSS issues exist in GDTaller. These issues allow an attacker to execute JavaScript code in a victim's browser by sending a malicious URL containing crafted...
GDTaller 跨站脚本漏洞
GDTaller is a digital certificate and electronic seal management system developed by the Spanish company GDTaller. GDTaller has a cross-site scripting vulnerability, which originates from the site parameter in the apprecuperarclave.php file. This vulnerability could allow attackers to execute...
Cross-site Request Forgery (CSRF)
Overview github.com/mattermost/mattermost/server/channels/app is a private-cloud Slack alternative Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the UpdateAccessControlPolicyActiveStatus endpoint. An attacker can change the active status of access control...
EUVD-2026-15485
Mattermost versions 11.4.x = 11.4.0, 11.3.x = 11.3.1, 11.2.x = 11.2.3, 10.11.x = 10.11.11 fail to prevent rendering of external SVGs on link embeds which allows unauthenticated users to crash the Mattermost webapp and desktop app via creating an issue or PR on GitHub.. Mattermost Advisory ID:...
Improper Check for Unusual or Exceptional Conditions
Overview github.com/mattermost/mattermost/server/channels/app is a private-cloud Slack alternative Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions through the rendering process of external SVGs on link embeds. An attacker can cause the web...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 RSC lab intentionally vulnerable Local Doc...
CVE-2026-20719
Mattermost versions 11.4.x = 11.4.0, 11.3.x = 11.3.1, 11.2.x = 11.2.3, 10.11.x = 10.11.11 fail to prevent rendering of external SVGs on link embeds which allows unauthenticated users to crash the Mattermost webapp and desktop app via creating an issue or PR on GitHub.. Mattermost Advisory ID:...
CVE-2026-23924
creationtimestamp| type| source ---|---|--- 2026-03-25 14:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhvcqd54ze2r...
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service (CVE-2026-32874, CVE-2026-32875)
Summary Python module UltraJSON is used by IBM App Connect Enterprise Certified Container by the mapping assistance component. IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service. This bulletin provides patch...
CVE-2026-2343
creationtimestamp| type| source ---|---|--- 2026-03-25 07:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116288640066659181 2026-03-25 07:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhukz3ljse2i 2026-03-25 10:05:16+00:00| seen|...
EUVD-2026-15121
An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.4. An app may be able to access protected user data...
EUVD-2026-15047
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5. Parsing a maliciously crafted file may lead to an unexpected app termination...
CVE-2026-4691
creationtimestamp| type| source ---|---|--- 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 03:00:13+00:00| seen| https://www.mozilla.org/en-US/security/advisories/mfsa2026-20/ 2026-03-25 04:01:18+00:00| seen|...
CVE-2026-28874
The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may cause an unexpected app termination...
CVE-2026-28842
The issue was addressed with improved bounds checks. This issue is fixed in macOS Tahoe 26.4. A buffer overflow may result in memory corruption and unexpected app termination...
CVE-2026-28837
A logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data...
CVE-2026-28820
This issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data...
CVE-2026-20657
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4. Parsing a maliciously crafted file may lead to an unexpected app...
