17 matches found
CVE-2026-40791-WP-Time-Slots-Booking-Form-XSS
CVE-2026-40791: 一个预订时段到管理员XSS 我在WordPress WP Time Slots Booking Form插件中发现了一个未认证存储型XSS。公开的预订提交控制了存储时间段值的部分。插件随后在管理员预订订单页面输出该值时没有进行转义。 技巧很简单：插件按字面空格拆分提交的预约字符串，但HTML将制表符视为标签名和属性之间的空白。所以 8: 作为时段值通过了插件解析器，然后在管理员打开预订列表时变成了实际的标记。...
SVGO: removeScripts allows executable links through namespace and control-character bypasses
Summary SVGO's opt-in removeScripts plugin failed to remove some executable links. Namespace-prefixed SVG anchors and URL schemes containing ASCII tabs or newlines could bypass its checks. Applications that used this plugin as their only protection for untrusted SVG input could expose users to...
NPM: SVGO: removeScripts allows executable links through namespace and control-character bypasses
NPM: SVGO: removeScripts allows executable links through namespace and control-character bypasses vulnerability discovered by ? in WordPress Npm svgo versions = 1.0.0, 2.8.4...
CVE-2026-84370 SVGO: removeScripts allows executable links through namespace and control-character bypasses
SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.4, 3.3.5, and 4.1.0, the opt-in removeScripts plugin, named removeScriptElement in versions 2 and 3, incompletely filters executable links in...
CVE-2026-84370 SVGO: removeScripts allows executable links through namespace and control-character bypasses
SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.4, 3.3.5, and 4.1.0, the opt-in removeScripts plugin, named removeScriptElement in versions 2 and 3, incompletely filters executable links in...
CVE-2026-62982
A flaw was found in Glances, an open-source system monitoring tool. The sanitizemustachedict function in glances/actions.py did not properly sanitize nested list and dictionary strings, specifically process command-line values. This allowed pipe characters to bypass the sanitization process and b...
WordPress Drag and Drop Multiple File Upload for Contact Form 7 plugin < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass vulnerability
Unauthenticated RCE via Control Character Filename Bypass vulnerability discovered by Jakub Herman in WordPress Plugin Drag and Drop Multiple File Upload – Contact Form 7 versions 1.3.9.9...
Astra Linux – Vulnerability in Python 3.11, Python 3.7
The fix for CVE-2026-0672, which prevented control characters from being accepted in http.cookies.Morsel, was incomplete. The Morsel.update, |= operators, and methods for unpickingling data were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js.outpu...
AZL-80055 CVE-2026-3644 affecting package python3 for versions less than 3.12.9-14
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.jsoutput lacked the output validation applie...
CVE-2026-25223 Fastify's Content-Type header tab character allows body validation bypass
Fastify is a fast and low overhead web framework, for Node.js. Prior to version 5.7.2, a validation bypass vulnerability exists in Fastify where request body validation schemas specified by Content-Type can be completely circumvented. By appending a tab character \t followed by arbitrary content ...
Fastify's Content-Type header tab character allows body validation bypass
Impact A validation bypass vulnerability exists in Fastify where request body validation schemas specified by Content-Type can be completely circumvented. By appending a tab character \t followed by arbitrary content to the Content-Type header, attackers can bypass body validation while the serve...
EUVD-2019-4614
Malware in sbrugna...
CVE-2023-52081
ffcss is a CLI interface to apply and configure Firefox CSS themes. Prior to 0.2.0, the function lookupPreprocess is meant to apply some transformations to a string by disabling characters in the regex - .. However, due to the use of late Unicode normalization of type NFKD, it is possible to bypa...
CVE-2024-56524
CVE-2024-56524 — Radware Cloud WAF: The Radware Cloud Web Application Firewall before 2025-05-07 allows bypass of firewall filtering by adding a special character to the request (and by non-deterministic GET-body data in some reports). The CVE affects Radware Cloud WAF versions prior to the patch...
CVE-2021-25748 Ingress-nginx `path` sanitization can be bypassed with newline character
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the spec.rules.http.paths.path field of an Ingress object in the networking.k8s.io or extensions API group to obtain the credentials of...
CVE-2018-20969
doedscript in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter...
