409 matches found
CVE-2026-81900
Concrete CMS before 9.5.3 is affected by a stored cross-site scripting vulnerability in the YouTube block (vWidth/vHeight). The root cause is that only trim() was applied to the stored width and height values before printing them into iframe HTML attributes , without escaping or integer casting. ...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: RDMA/srpt: Do not register the event handler until the srpt device is fully set up. In rare cases, KASAN reports a use-after-free error in the srptrefreshport function. This appears to occur because the event handler is...
CVE-2026-88853
Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla 17.0.0 - Modals Pro intentionally supports JavaScript Events such as on-open and on-closed. Affected versions do not distinguish trusted extension configuration from event code...
CVE-2026-88853 Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla < 17.0.0
Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla 17.0.0 - Modals Pro intentionally supports JavaScript Events such as on-open and on-closed. Affected versions do not distinguish trusted extension configuration from event code...
CVE-2026-88853
Modals Pro is a Joomla extension by regularlabs.com that supports JavaScript event handlers such as on-open and on-closed . Affected versions (prior to 17.0.0 ) fail to distinguish trusted extension configuration from event code supplied in ordinary article content, allowing a lower-privileged au...
CVE-2026-88853 Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla < 17.0.0
Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla 17.0.0 - Modals Pro intentionally supports JavaScript Events such as on-open and on-closed. Affected versions do not distinguish trusted extension configuration from event code...
EUVD-2026-77309
Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla 17.0.0 - Modals Pro intentionally supports JavaScript Events such as on-open and on-closed. Affected versions do not distinguish trusted extension configuration from event code...
CVE-2026-89508 RDMA/ucma: Lock the handler in ucma_set_ib_path()
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucmasetibpath ucmasetibpath calls ucmaeventhandler straight from the write path, without the handler lock that keeps ctx-file stable while a uevent is queued. The handler re-reads ctx-file for every...
CVE-2026-89253 AVideo Stored XSS via donationLink in watch page button
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the user 'donationLink' profile field. User::setDonationLink objects/user.php stores the value and save validates it only with filtervar..., FILTERVALIDATEURL, which accepts...
CVE-2026-89253 AVideo Stored XSS via donationLink in watch page button
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the user 'donationLink' profile field. User::setDonationLink objects/user.php stores the value and save validates it only with filtervar..., FILTERVALIDATEURL, which accepts...
CVE-2026-89253
WWBN AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) has a stored cross-site scripting (XSS) vulnerability in the user donationLink profile field. The value is validated only with filter_var(..., FILTER_VALIDATE_URL), which accepts injected payloads, and is output via strip_tags(...
PT-2026-90224
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma set ib path ucma set ib path calls ucma event handler straight from the write path, without the handler lock that keeps ctx-file stable while a uevent is queued. The handler re-reads ctx-file f...
EUVD-2026-75221
A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is an unknown function of the component Apple Notification Center Service Event Handler. The manipulation leads to buffer overflow. The attack must be carried out from...
CVE-2026-87931
A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is an unknown function of the component Apple Notification Center Service Event Handler. The manipulation leads to buffer overflow. The attack must be carried out from...
CVE-2026-87931 Behavioral Technology Group Pavlok Behavioral Conditioning Wearable Apple Notification Center Service Event buffer overflow
A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20260707. Impacted is an unknown function of the component Apple Notification Center Service Event Handler. The manipulation leads to buffer overflow. The attack must be carried out from...
CVE-2024-42009
CVE-2024-42009 – Roundcube 保存型XSS Docker PoC 📌 概要 このリポジトリは、Roundcube Webmail の CVE-2024-42009 （保存型クロスサイトスクリプティング（XSS）の脆弱性）に対する実証コード（PoC）を示しています。 この脆弱性は、不適切なHTMLサニタイズとその後の安全でない属性の再処理に起因し、攻撃者が細工したHTMLメールを介して悪意のあるイベントハンドラを注入することを可能にします。 ⚠️ 影響を受けるバージョン Roundcube ≤ 1.5.7 Roundcube ≤ 1.6.7 🧠 脆弱性の概要...
CVE-2026-86431
league/commonmark thephpleague/commonmark versions = 2.7.0 and 2.9.1 contain a cross-site scripting vulnerability in the AttributesExtension. Prefixing an attribute name with a single U+000C form feed byte e.g. \x0Conclick="alert1" bypasses the AttributesHelper::filterAttributes 'on' event-handle...
DEBIAN-CVE-2026-86431
league/commonmark thephpleague/commonmark versions = 2.7.0 and 2.9.1 contain a cross-site scripting vulnerability in the AttributesExtension. Prefixing an attribute name with a single U+000C form feed byte e.g. \x0Conclick="alert1" bypasses the AttributesHelper::filterAttributes 'on' event-handle...
CVE-2026-86431 commonmark before 2.9.1 XSS via AttributesExtension form feed bypass
league/commonmark thephpleague/commonmark versions = 2.7.0 and 2.9.1 contain a cross-site scripting vulnerability in the AttributesExtension. Prefixing an attribute name with a single U+000C form feed byte e.g. \x0Conclick="alert1" bypasses the AttributesHelper::filterAttributes 'on' event-handle...