28 matches found
wordreaper
프로젝트 소개 이 도구는 스마트하고 집중된 워드리스트를 스크래핑하고 생성하도록 설계되었으며, 강력한 비밀번호 크래킹을 위해 CSS 선택자를 수술처럼 정밀하게 활용합니다. 기능 개요 HTML 스크래핑 정밀한 CSS 선택자를 사용하여 텍스트 추출 모든 HTML 소스에서 대상 지정 스크래핑 지원 GitHub/Gist/CVS 워드리스트 가져오기 GitHub 저장소, Gist 또는 CVS 소스에서 원시 파일 직접 가져오기 커뮤니티 유지 워드리스트 자동 통합 지원 일반 텍스트 스크래핑 간단한 줄바꿈 기반 텍스트 목록 파싱 CTF 제공 사...
VUL4J-59
jsoup: 실제 HTML을 이해하는 자바 HTML 파서 jsoup은 실제 HTML을 다루기 위한 자바 라이브러리입니다. DOM, CSS 및 jQuery와 유사한 메서드를 활용하여 데이터를 추출하고 조작할 수 있는 매우 편리한 API를 제공합니다. jsoup은 WHATWG HTML5 사양http://whatwg.org/html을 구현하며, 최신 브라우저와 동일한 DOM으로 HTML을 파싱합니다. URL, 파일 또는 문자열에서 HTML 파싱 DOM 탐색 또는 CSS 선택자를 사용하여 데이터 찾기 및 추출 HTML 요소, 속성 및...
Linux Distros Unpatched Vulnerability : CVE-2026-49477
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expressi...
CVE-2026-49477
A flaw was found in soupsieve, a CSS selector library. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying specially crafted, untrusted CSS selector strings. The flaw occurs due to a regular expression vulnerable to catastrophic backtracking when processing a...
CVE-2026-49476
A flaw was found in soupsieve, a CSS selector library used with Beautiful Soup 4. This vulnerability allows a remote attacker to cause a denial of service DoS by supplying a specially crafted CSS selector string. The parser allocates unbounded memory when compiling large, comma-separated selector...
DEBIAN-CVE-2026-49477
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminated quoted value in...
UBUNTU-CVE-2026-49477
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expression vulnerable to catastrophic backtracking when processing an attribute selector with an unterminated quoted value in...
CVE-2026-49476 Soup Sieve: Memory Exhaustion via Large Comma-Separated Selector Lists in soupsieve
Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve allocates unbounded memory when compiling large comma-separated selector lists, allowing an attacker who can supply a crafted selector string to soupsieve.compile o...
PT-2026-56840
Name of the Vulnerable Software and Affected Versions soupsieve affected versions not specified Description The CSS selector parser in soupsieve contains a regular expression vulnerable to catastrophic backtracking, which occurs when the regex engine takes an exponential amount of time to process...
soupsieve: Soupsieve: Denial of Service via crafted CSS selector strings
A flaw was found in soupsieve, a CSS selector library. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying specially crafted, untrusted CSS selector strings. The flaw occurs due to a regular expression vulnerable to catastrophic backtracking when processing a...
Infinite loop
Overview justhtml is an A pure Python HTML5 parser that just works. Affected versions of this package are vulnerable to Infinite loop in the handling of CSS selectors and linkification processes. An attacker can cause excessive CPU or memory consumption by supplying specially crafted selector...
justhtml introduces denial-of-service hardening
Summary justhtml 1.18.0 fixes multiple low-severity denial-of-service hardening issues in CSS selector handling and linkification. These issues are availability concerns. They do not allow script execution, data disclosure, or sanitizer bypass by themselves. Affected versions - justhtml 1.18.0...
CVE-2020-10242
An issue was discovered in Joomla! before 3.9.16. Inadequate handling of CSS selectors in the Protostar and Beez3 JavaScript allows XSS attacks...
BIT-JOOMLA-2020-10242
An issue was discovered in Joomla! before 3.9.16. Inadequate handling of CSS selectors in the Protostar and Beez3 JavaScript allows XSS attacks...
Fedora: Security Advisory for golang-github-andybalholm-cascadia (FEDORA-2022-3969b64d4b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 35 Update: golang-github-andybalholm-cascadia-1.2.0-6.fc35
The Cascadia package implements CSS selectors for use with the parse trees produced by the html package...
[SECURITY] Fedora 36 Update: golang-github-andybalholm-cascadia-1.2.0-6.fc36
The Cascadia package implements CSS selectors for use with the parse trees produced by the html package...
in slidevjs/slidev
Description Vulnerability: CSS injection and Limited XSS via postMessage While reading the code, I came across packages/client/iframes/monaco/index.ts file, where a message eventListener is being used. The callback function adds the content of message inside tag. This way, the attacker can post a...
