CVE-2026-39200

CVE-2026-39200 — Toko Online RotI의 반사형 크로스 사이트 스크립팅XSS 요약 Toko Online RotI 웹 애플리케이션의 produk 요청 파라미터에서 반사형 크로스 사이트 스크립팅XSS 취약점이 발견되었습니다. 이 애플리케이션은 사용자가 제공한 입력값을 큰따옴표로 묶인 HTML 태그 속성 내부에 반사하기 전에 HTML 인코딩하지 않습니다. 공격자는 악의적인 URL을 제작하여 피해자가 해당 URL을 방문할 경우 피해자의 브라우저 세션 컨텍스트에서 임의의 JavaScript를 실행시킬 수 있습니다...

CVE-2026-102723: NULL Pointer Dereference

NULL Pointer Dereference on MSRP Attribute Table Exhaustion...

CVE-2026-102724: NULL Pointer Dereference

NULL Pointer Dereference When Evicting the Sole MSRP Attribute...

CVE-2026-102725: Out-of-bounds Read

Out-of-bounds Read from Unvalidated MSRP Attribute List Length...

CVE-2026-97533

A flaw was found in the Linux kernel's x86 Page Attribute Table PAT memory management subsystem. A race condition occurs when memory attributes are changed concurrently with page table collapse operations, allowing the kernel to access memory after it has been freed. A local user could exploit th...

CVE-2024-25293

MJML 로컬 코드 실행 PoC CVE-2024-25293 취약점에 대한 개념 증명PoC입니다. mjml-app v3.0.4 및 3.1.0-beta에서 원격 코드 실행RCE이 발견되었습니다. 이 저장소에는 취약한 애플리케이션 예제와 이에 대한 개념 증명PoC 익스플로잇이 포함되어 있습니다. PoC로 프로세스를 자동화하는 python 파일이 있습니다. 1. 취약점 개요: 취약점 주제: 로컬 코드 실행 취약점 버전: mjml-app 3.0.4-win 및 mjml-app 3.1.0-beta 공격 유형: 원격 코드 실행 공격 구성...

CVE-2026-101111

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library Free 6.4.6 - The public book-detail page template, site/views/viewbook/tmpl/default.php, echoes the raw title request parameter directly into a double-quoted HTML attribute with no escaping function of any kind echo...

CVE-2026-101111

The Joomla Extension - ordasoft.com - Book Library (Free) version

MGASA-2026-0460 Updated p11-kit packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Stack exhaustion via unbounded recursion in rpc attribute parsing. CVE-2026-13757 Integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems. CVE-2026-18938...

Updated p11-kit packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Stack exhaustion via unbounded recursion in rpc attribute parsing. CVE-2026-13757 Integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems. CVE-2026-18938...

CVE-2026-97505

A flaw was found in the Linux kernel. Missing authorization checks in the PCI sysfs interface can allow a local user to cause a denial of service DoS. The kernel fails to verify administrative capabilities when resizing a device Base Address Register BAR, relying only on basic file access...

CVE-2026-98133

A flaw was found in the Linux kernel's NTFS file system implementation. When an error occurs while setting an extended attribute EA, the kernel prematurely clears the flag indicating that extended attributes are present. A local user can exploit this vulnerability by triggering a failed extended...

CVE-2026-93812

A flaw was found in the Linux kernel's ksmbd Server Message Block server. A remote attacker could cause a denial of service DoS by triggering a kernel memory leak during security attribute operations. When an error occurs while encoding security descriptors, dynamically allocated memory is not...

UBUNTU-CVE-2026-94283

An out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...

CVE-2026-94283

A flaw was found in libX11. An out-of-bounds read vulnerability in the X Input Method XIM attribute parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications when processing specially crafted attributes. Mitigation Mitigation for this issue is...

CVE-2026-94283

The libX11 library, specifically within the XIM (X Input Method) attribute parser , contains an out-of-bounds read vulnerability in versions prior to 1.8.14 . This flaw could be exploited by malicious X servers to cause a crash in attached X clients. No specific exploit details or remediation ste...

CVE-2026-94283: Out-of-bounds Read

An out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...

PT-2026-99814

Name of the Vulnerable Software and Affected Versions libX11 versions prior to 1.8.14 Description An out-of-bounds read issue exists in the XIM X Input Method attribute parser. This flaw allows a malicious X server to cause a crash of attached X clients by triggering an out-of-bounds read, which...

Important: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: Expat: Denial of Service via quadratic complexity in attribute processing CVE-2026-66046 expat: Expat: XML Injection via Malformed UTF-16 Input CVE-2026-93990 For more details about the security issues, including the impact, a...

CVE-2026-97319

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.2 does not sanitize and escape a block attribute before outputting it in a page, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...