Lucene search
+L

4056 matches found

OSV
OSV
added 2026/03/20 8:35 p.m.8 views

GHSA-7J2X-32W6-P43P SVG Dimension Capping Bypass via XML Comment Injection in @dicebear/converter ensureSize()

Summary The ensureSize function in @dicebear/converter used a regex-based approach to rewrite SVG width/height attributes, capping them at 2048px to prevent denial of service. This size capping could be bypassed by crafting SVG input that causes the regex to match a non-functional occurrence of s...

7.5CVSS5.8AI score0.00376EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/03/20 8:35 p.m.18 views

SVG Dimension Capping Bypass via XML Comment Injection in @dicebear/converter ensureSize()

Summary The ensureSize function in @dicebear/converter used a regex-based approach to rewrite SVG width/height attributes, capping them at 2048px to prevent denial of service. This size capping could be bypassed by crafting SVG input that causes the regex to match a non-functional occurrence of s...

7.5CVSS5.8AI score0.00376EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/03/20 6:31 p.m.8 views

EUVD-2026-13758

A security flaw has been discovered in atjiu pybbs 6.0.0. This impacts the function create of the file src/main/java/co/yiiu/pybbs/controller/api/CommentApiController.java. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been release...

5.1CVSS4.3AI score0.00268EPSS
SaveExploits0References5
NVD
NVD
added 2026/03/20 6:16 p.m.7 views

CVE-2026-4495

A security flaw has been discovered in atjiu pybbs 6.0.0. This impacts the function create of the file src/main/java/co/yiiu/pybbs/controller/api/CommentApiController.java. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been release...

5.1CVSS0.00268EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/20 6:2 p.m.4 views

CVE-2026-4495

A security flaw has been discovered in atjiu pybbs 6.0.0. This impacts the function create of the file src/main/java/co/yiiu/pybbs/controller/api/CommentApiController.java. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been release...

5.1CVSS4.3AI score0.00268EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/03/20 6:2 p.m.36 views

CVE-2026-4495 atjiu pybbs CommentApiController.java create cross site scripting

A security flaw has been discovered in atjiu pybbs 6.0.0. This impacts the function create of the file src/main/java/co/yiiu/pybbs/controller/api/CommentApiController.java. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been release...

5.1CVSS0.00268EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/03/20 6:2 p.m.5 views

CVE-2026-4495 atjiu pybbs CommentApiController.java create cross site scripting

A security flaw has been discovered in atjiu pybbs 6.0.0. This impacts the function create of the file src/main/java/co/yiiu/pybbs/controller/api/CommentApiController.java. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been release...

5.1CVSS4.3AI score0.00268EPSS
SaveExploits0References4
OSV
OSV
added 2026/03/20 5:25 p.m.5 views

GHSA-MR3J-P26X-72X4 Vikunja has an IDOR in Task Comments Allows Reading Arbitrary Comments

An authenticated user can read any task comment by ID, regardless of whether they have access to the task the comment belongs to, by substituting the task ID in the API URL with a task they do have access to. Details The GET /api/v1/tasks/taskID/comments/commentID endpoint performs an authorizati...

5.3CVSS5.8AI score0.00254EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/03/20 5:22 p.m.12 views

CVE-2026-33128

A flaw was found in H3, a minimal HTTP framework. A remote attacker can exploit this flaw by injecting malicious Server-Sent Events SSE due to improper sanitization of newline characters in the formatEventStreamMessage and formatEventStreamComment functions. An attacker who controls any part of a...

10CVSS5.8AI score0.00573EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/03/20 9:37 a.m.4 views

CVE-2026-33128

H3 is a minimal HTTP framework. In versions prior to 1.15.6 and between 2.0.0 through 2.0.1-rc.14, createEventStream is vulnerable to Server-Sent Events SSE injection due to missing newline sanitization in formatEventStreamMessage and formatEventStreamComment. An attacker who controls any part of...

7.5CVSS5.9AI score0.00573EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2026/03/20 12:0 a.m.20 views

pybbs 代码注入漏洞

pybbs is a Java-developed community platform created by iuiu’s individual developers. Version 6.0.0 of pybbs contains a code injection vulnerability. This vulnerability stems from a cross-site scripting attack in the create function located in the file...

5.1CVSS5.7AI score0.00268EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/03/20 12:0 a.m.9 views

PT-2026-26666

CVE-2025-63260 SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message. https://t.co/lkPWuPDbql...

5.8AI score0.00156EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/03/20 12:0 a.m.5 views

CVE-2025-63260

SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message...

5.8AI score0.00156EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/03/20 12:0 a.m.5 views

CVE-2025-63260

SyncFusion 30.1.37 is vulnerable to Cross Site Scripting XSS via the Document-Editor reply to comment field and Chat-UI Chat message...

5.8AI score0.00156EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/03/20 12:0 a.m.11 views

PT-2026-26751

Name of the Vulnerable Software and Affected Versions Vikunja affected versions not specified Description An authenticated user can access task comments without proper authorization checks. Specifically, an attacker can read any task comment by ID, even if they do not have access to the associate...

5.3CVSS5.9AI score0.00254EPSS
SaveExploits0
CVE
CVE
added 2026/03/20 12:0 a.m.27 views

CVE-2025-63260

SyncFusion 30.1.37 is affected by a Cross-Site Scripting (XSS) vulnerability exposed through the Document-Editor’s reply-to-comment field and the Chat-UI chat messages. The issues are present in the UI components of SyncFusion for version 30.1.37 and are described consistently across Red Hat and ...

5.4CVSS5.8AI score0.00156EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/18 12:0 a.m.8 views

PT-2026-26192

Summary createEventStream in h3 is vulnerable to Server-Sent Events SSE injection due to missing newline sanitization in formatEventStreamMessage and formatEventStreamComment. An attacker who controls any part of an SSE message field id, event, data, or comment can inject arbitrary SSE events to...

10CVSS6AI score0.00573EPSS
SaveExploits1References9
EUVD
EUVD
added 2026/03/16 6:32 p.m.10 views

EUVD-2025-208745

Cross Site scripting vulnerability XSS in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitrary HTML, which will be rendered in the web UI when viewed by other users. This could potentially lead to user interface redress attacks or be escalated to XSS in certain contexts...

6.1CVSS5.8AI score0.00175EPSS
SaveExploits1References2
NVD
NVD
added 2026/03/16 4:16 p.m.10 views

CVE-2025-57543

Cross Site scripting vulnerability XSS in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitrary HTML, which will be rendered in the web UI when viewed by other users. This could potentially lead to user interface redress attacks or be escalated to XSS in certain contexts...

6.1CVSS0.00175EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/03/16 3:30 p.m.7 views

EUVD-2026-12220

A flaw has been found in CodePhiliaX Chat2DB up to 0.3.7. This vulnerability affects the function exportTable/exportTableColumnComment/exportView/exportProcedure/exportTriggers/exportTrigger/updateProcedure of the file DMDBManage.java of the component Database Export Handler. This manipulation...

6.5CVSS5.5AI score0.00242EPSS
SaveExploits0References5
Rows per page
Query Builder