CVE-2022-42094

Backdrop CMS バージョン 1.23.0 脆弱性の説明: Backdrop CMS バージョン 1.23.0 には、Card コンテンツを介した格納型クロスサイトスクリプティング（XSS）脆弱性が存在することが判明しました。 攻撃ベクトル: 攻撃者は「Card content」に何かを投稿し、XSS ペイロードを「Body」入力に挿入し、「Raw HTML Editor」を選択して格納型 XSS を悪用する必要があります。XSS ペイロードは保存後すぐに実行されます。 影響を受ける環境: http://ipaddress/backdrop/node/add/card POST...

The vulnerability of the soup_body_input_stream_read_chunked() function in the LibSoup library allows a attacker to circumvent existing security restrictions, implement a cache poisoning attack, or gain unauthorized access to protected information.

The vulnerability of the soupbodyinputstreamreadchunked function in the LibSoup library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to circumvent existing security measures, execute a cache poisoning attack, or gain unauthorized...

FHIR Validator: Unauthenticated Blind SSRF via /loadIG Endpoint Enables Internal Network Probing

The /loadIG HTTP endpoint in the FHIR Validator HTTP service accepts a user-supplied URL via JSON body and makes server-side HTTP requests to it without any hostname, scheme, or domain validation. An unauthenticated attacker with network access to the validator can probe internal network services...

PT-2026-44752

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description An unsigned to signed conversion error exists in the soup body input stream read chunked function. A remote attacker can exploit this by sending a malicious HTTP request when libsoup is used...

CVE-2025-57520

A Cross Site Scripting XSS vulnerability exists in Decap CMS thru 3.8.3. Input fields such as body, tags, title, and description are not properly sanitized before being rendered in the content preview pane. This enables an attacker to inject arbitrary JavaScript which executes whenever a user vie...

CVE-2002-1271

The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx...