31512 matches found
CVE-2025-14046
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed user-supplied HTML to inject DOM elements with IDs that collided with server-initialized data islands. These collisions could overwrite or shadow critical application state objects used by...
CVE-2025-14046
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed user-supplied HTML to inject DOM elements with IDs that collided with server-initialized data islands. These collisions could overwrite or shadow critical application state objects used by...
CVE-2025-14046 Insufficient HTML Sanitization Allows User-Controlled DOM Elements to Overwrite Server-Initialized Data Islands and Trigger Unintended Server-Side POST Requests
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed user-supplied HTML to inject DOM elements with IDs that collided with server-initialized data islands. These collisions could overwrite or shadow critical application state objects used by...
EUVD-2025-202752
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed user-supplied HTML to inject DOM elements with IDs that collided with server-initialized data islands. These collisions could overwrite or shadow critical application state objects used by...
CVE-2025-14046 Insufficient HTML Sanitization Allows User-Controlled DOM Elements to Overwrite Server-Initialized Data Islands and Trigger Unintended Server-Side POST Requests
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed user-supplied HTML to inject DOM elements with IDs that collided with server-initialized data islands. These collisions could overwrite or shadow critical application state objects used by...
CVE-2025-14046
CVE-2025-14046 affects GitHub Enterprise Server; improper input neutralization allows user-supplied HTML to inject DOM elements with conflicting IDs, shadowing server-initialized data islands and causing unintended server-side POST requests or other unauthorized backend interactions. Exploitation...
CVE-2025-67740
In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata...
CVE-2025-67740
In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata...
CVE-2025-67740
In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata...
EUVD-2025-202696
In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata...
CVE-2025-67740
JetBrains TeamCity CVE-2025-67740 affects TeamCity before 2025.11.0, where improper access control could expose GitHub App token metadata. The connected Nessus entry notes multiple vulnerabilities in versions prior to 2025.11.0 (e.g., CVEs 67741, 67765, 68166, etc.). Remediation: upgrade to TeamC...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update
An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...
CVE-2025-64986
creationtimestamp| type| source ---|---|--- 2025-12-11 12:20:48+00:00| seen| https://gist.github.com/Darkcrai86/c3f20afa369e6879fa08b5534ec36eb8 2025-12-11 13:18:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7pnxiqm2j2y 2025-12-11 13:25:53+00:00| seen|...
CVE-2025-64989
creationtimestamp| type| source ---|---|--- 2025-12-11 12:19:33+00:00| seen| https://gist.github.com/Darkcrai86/b5ebfa434b475d558d1dbeb63e7cad09 2025-12-11 13:24:35+00:00| seen| https://gist.github.com/Darkcrai86/4c2bc03c7cf9f54088b42c7dbc42d289 2025-12-11 13:55:36+00:00| seen|...
GHSA-GVMQ-HR29-XRX3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-6JXR-VC7P-9HQV vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X93G-7WJC-5JQW vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-9WWW-PQCC-JM28 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-6PGW-376W-JRXX vulnerabilities
Vulnerabilities for packages: chromium...
JetBrains TeamCity 安全漏洞
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides features such as continuous unit testing, code quality analysis and build issue analysis reports. A security vulnerability exists in JetBrains TeamCity...