114 matches found
CVE-2026-89122: URL Redirection to Untrusted Site
SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attacker could craft a malicious link that, when clicked by a victim, loads attacker-controlled content within the trusted application context. Successful exploitation could allo...
CVE-2026-63206
Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, zammad's HTML sanitizer, which blocks remote images in ticket articles and email views, can be bypassed using a shortened URL format that omits the double slash after the scheme for example a shortened HTTP URL...
EUVD-2026-87215
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, zammad's HTML sanitizer HtmlSanitizer::Strict blocks external URLs in to prevent remote content loading, but the srcset attribute, also allowlisted for , is not subject to the same check. This oversight...
CVE-2026-56735
The open source helpdesk system Zammad is vulnerable to an oversight in its HTML sanitizer (HtmlSanitizer::Strict ). Prior to versions 7.0.2 and 7.1.0 , the sanitizer blocked external URLs in tags but failed to apply the same check to the srcset attribute. An attacker can bypass external content...
PT-2026-98160
Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.1.8 Discourse versions prior to 2026.6.3 Discourse versions prior to 2026.7.2 Discourse versions prior to 2026.8.0 Description The iframe src traversal guard fails to treat literal backslashes as path separator...
CVE-2026-92839
Canva Desktop before v1.125.0 performed double decoding in the deeplink handler. A threat actor could cause the application to load arbitrary same-origin content under the user’s session...
PT-2026-94155
Name of the Vulnerable Software and Affected Versions Canva Desktop versions prior to 1.125.0 Description The application performs double decoding within the deeplink handler. This behavior allows a threat actor to force the application to load arbitrary same-origin content using the active user...
Malicious code in esdjiw (npm)
The package contains obfuscated code to load content from a suspicious external domain in the user's browser --- Credit: OpenSSF source...
Cross-site Scripting (XSS)
Overview loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the SVG sanitizer's handling of the href attribute, which restricts xlink:href on SVG...
SVG `href` attribute bypasses local-reference restriction in Loofah
Summary Loofah's HTML5 sanitizer restricted only the xlink:href attribute on certain SVG elements to local, same-document references. Browsers also accept a plain href attribute as an alternative to the deprecated xlink:href per the SVG 2 spec, but Loofah did not apply the same restriction to it,...
CVE-2026-9818
CVE-2026-9818 is rejected/not used; this entry does not represent an active vulnerability.
EUVD-2026-32893
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-9818
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-9818 Roundcube Local/Private URL Fetch Bypass
Roundcube's HTML sanitization path for message rendering allows loopback, localhost, RFC1918, link-local, and ULA URLs even when remote content loading is disabled. A remote attacker can send an HTML email that causes the victim's browser to issue requests to local or private-network services...
PT-2026-44369
Roundcube's HTML sanitization path for message rendering allows loopback, localhost, RFC1918, link-local, and ULA URLs even when remote content loading is disabled. A remote attacker can send an HTML email that causes the victim's browser to issue requests to local or private-network services...
WS-2018-0057
XML External Entity Processing vulnerability in TYPO3 6.2.x before 6.2.19 and 7.6.x before 7.6.4. All XML processing within the TYPO3 CMS are vulnerable to XEE processing. This can lead to load internal and/or external file content within an XML structure...
CVE-2025-54559
An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote Path Traversal for loading arbitrary external content...
CVE-2025-54559: Improper Limitation of a Pathname to a Restricted Directory
An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote Path Traversal for loading arbitrary external content...