GHSA-9JMQ-XGJM-P8C2 Sync-in Server has a stored cross-site scripting (XSS) vulnerability

A Stored Cross-Site Scripting XSS vulnerability in Sync-in Server before 1.9.3 allows an authenticated attacker to execute arbitrary JavaScript in a victim's browser. By uploading a crafted SVG file containing a malicious payload, an attacker can access and exfiltrate sensitive information,...

CVE-2025-12451

The Easy SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploads in all versions up to, and including, 4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above,...

CVE-2026-26993 Flare has XSS vulnerability in Raw File Preview

Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Versions 1.7.0 and below allow users to upload files without proper content validation or sanitization. By embedding malicious JavaScript within an SVG or other active content formats such as HTML...

CVE-2026-24743

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A Stored Cross-Site Scripting XSS vulnerability occurs in the upload Invoice Logo functions of InvoicePlane version 1.7.0. The Upload Invoice Logo function allows the application to upload svg file...

CVE-2025-67438

A Stored Cross-Site Scripting XSS vulnerability in Sync-in Server before 1.9.3 allows an authenticated attacker to execute arbitrary JavaScript in a victim's browser. By uploading a crafted SVG file containing a malicious payload, an attacker can access and exfiltrate sensitive information,...

PT-2026-39061

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the drm/amdgpu component where the amdgpu userq signal ioctl function lacks proper upper bound checks on user inputs. Providing excessively large input values can lead t...

The vulnerability of SMM communication buffers in AMD’s microprogrammed graphics processors allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of SMM communication buffers in AMD graphics processor microprogramming systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected...

Sync in 安全漏洞

Sync in is an open-source server synchronization platform developed by Sync-in. Versions of Sync in prior to 1.9.3 contained a security vulnerability. This vulnerability stemmed from the upload of specially crafted SVG files containing malicious payloads, which could lead to storage-side cross-si...

The vulnerability in the debugging interface of AMD’s microprogramming graphics processor allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the debugging interface for AMD graphics processor microprogramming software is related to access control deficiencies. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of AMD Secure Processor microprogramming software for graphics processors allows attackers to execute a brute-force attack and circumvent existing security restrictions.

The vulnerability of AMD Secure Processor microprogramming software for graphics processors relates to unreliable pointer aliasing. Exploiting this vulnerability could allow an attacker to execute a brute-force attack and circumvent existing security restrictions...

The vulnerability of SMM buffer in AMD graphics processor microprogramming software allows a hacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the SMM buffer in AMD’s graphics processor microsoftware is related to the breach of the buffer’s initial boundary. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

The vulnerability of the SEV microprogramming software components of AMD graphics processors allows attackers to compromise the integrity of protected information.

The vulnerability of the SEV microprogramming software for AMD graphics processors is related to improper prevention of bit modification of the lock bits. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of AMD’s graphics processor microprogramming software lies in the improper isolation of common resources between trusted and untrusted agents, allowing attackers to compromise the integrity of protected information.

The vulnerability of AMD’s microprogrammed graphics processor software is related to the improper isolation of common resources between trusted and untrusted agents. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the AMD Secure Processor microprogramming software for graphics processors allows a hacker to gain unauthorized access to protected information.

The vulnerability of AMD Secure Processor microprogramming software for graphics processors relates to unreliable pointer aliasing. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the trusted operating system for microprogrammed graphics processors from AMD allows a hacker to trigger a service failure.

The vulnerability of the trusted operating system for AMD graphics processors’ microprogramming software is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability of AMD’s microprogrammed graphics processor DMA component allows attackers to compromise the integrity of protected information.

The vulnerability of AMD’s microprogrammed graphics processor DMA component is related to defects in error handling during the verification of the host key. Exploiting this vulnerability can allow attackers to compromise the integrity of the protected information...

The vulnerability of AMD’s microprogrammed graphics processor software, related to errors in processing input data, allows attackers to compromise the integrity of protected information.

The vulnerability of AMD’s microprogrammed graphics software is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of protected information...

The vulnerability of AMD graphics processor microprogramming interfaces via PCIe allows a hacker to trigger a service failure.

The vulnerability of AMD graphics processor microprogramming interfaces based on PCIe is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of AMD’s SMM microprogramming system for graphics processors allows attackers to execute arbitrary code.

The vulnerability of AMD’s SMM microprogramming graphics processor driver is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2026-21020

Name of the Vulnerable Software and Affected Versions Sync-in Server versions prior to 1.9.3 Description A Stored Cross-Site Scripting XSS issue exists in Sync-in Server. An authenticated attacker can execute arbitrary JavaScript in a victim’s browser. This is achieved by uploading a crafted SVG...