CVE-2026-68523: Uncontrolled Resource Consumption

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into one fragment per page with no upper bound. This is fixed in...

Heights Finance data breach: What customers need to know

Heights Finance Holdings' online data breach notification says an unauthorized party accessed a third-party cloud platform containing customer data, potentially exposing highly sensitive personal, banking, and identity information. Heights Finance is a consumer lender that offers personal...

PT-2026-55746

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into one fragment per page with no upper bound. The height is take...

EUVD-2023-41134

Malicious code in bioql PyPI...

CVE-2019-17667

Comtech H8 Heights Remote Gateway 2.5.1 devices allow XSS and HTML injection via the Site Name aka SiteName field...

PT-2025-5350

Name of the Vulnerable Software and Affected Versions CometBFT versions prior to 0.38.17 CometBFT versions prior to 1.0.1 Description CometBFT is a distributed, Byzantine fault-tolerant, deterministic state machine replication engine. In the blocksync protocol, peers send their base and latest...

CometBFT security vulnerabilities

CometBFT is a Byzantine Fault Tolerant BFT middleware open-sourced by CometBFT that employs state-translation machines written in any programming language and can be replicated securely on many machines. CometBFT suffers from a security vulnerability that stems from a failure to check for...

CVE-2024-54238: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cleveland Heights-University Heights Public Library Webdeveloper Board Document Manager from CHUHPL board-document-manager-from-chuhpl allows Reflected XSS.This issue affects Board Document Manager...

maverickheights.com Cross Site Scripting vulnerability OBB-3638111

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-37214

Heights Telecom ERO1xS-Pro Dual-Band FW version BZERO1XP.025...

CVE-2023-37214

Heights Telecom ERO1xS-Pro Dual-Band FW version BZERO1XP.025...

CVE-2023-37214

CVE-2023-37214 concerns Heights Telecom ERO1xS-Pro Dual-Band FW version BZ_ERO1XP.025 . CNNVD reports a command injection vulnerability in this device/firmware. Connected documents provide limited technical detail: no explicit root cause, vulnerable component, exploit details, or CVSS data beyond...

CVE-2023-37214 Heights Telecom ERO1xS-Pro Dual-Band WiFi command injection

Heights Telecom ERO1xS-Pro Dual-Band FW version BZERO1XP.025...

CVE-2023-37214: Improper Neutralization of Special Elements used in a Command

Heights Telecom ERO1xS-Pro Dual-Band FW version BZERO1XP.025...

PT-2023-25832 · Heights Telecom · Heights Telecom Ero1Xs-Pro Dual-Band

Name of the Vulnerable Software and Affected Versions: Heights Telecom ERO1xS-Pro Dual-Band FW version BZ ERO1XP.025 Description: The issue affects Heights Telecom ERO1xS-Pro Dual-Band devices. No information is provided about the estimated number of potentially affected devices worldwide or...

Heights Telecom ERO1xS-Pro command injection vulnerability

Heights Telecom ERO1xS-Pro is a Dual-Band WiFi6 AX5400 MESH Extender from Heights Telecom. A security vulnerability exists in Heights Telecom ERO1xS-Pro Dual-Band FW BZERO1XP.025 version, which stems from the presence of a command injection vulnerability...

gemheights.in Cross Site Scripting vulnerability OBB-3459333

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2017-17081

The gmcmmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service integer signedness error and out-of-array read via a crafted MPEG file...

armandheights.com Improper Access Control vulnerability OBB-2275382

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

EulerOS 2.0 SP3 : poppler (EulerOS-SA-2021-1112)

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01. It can, for example, be triggered by...