markdown-exfil-tester

valtik-markdown-exfil-tester Probador de caja negra para inyección indirecta de instrucciones que conduce a la exfiltración de markdown / HTML en chatbots basados en LLM. Esta es la clase de vulnerabilidad que afectó a Microsoft 365 Copilot CVE-2025-32711, también conocido como EchoLeak, ChatGPT...

CVE-2026-71803

money-pos 1.0 contains a stored Cross-Site Scripting XSS vulnerability. When processing returns, the backend fails to filter or escape the goodsName parameter, directly concatenating it into the order log description; the frontend subsequently renders this content using v-html. An attacker with...

CVE-2026-85630

A flaw was found in perl-HTML-FormHandler. This vulnerability allows a remote attacker to inject malicious scripts into web pages due to the processattrs method failing to properly escape field attributes when rendering HTML. By manipulating input, an attacker can embed JavaScript, leading to...

CVE-2026-71803

money-pos 1.0 is affected by a stored Cross-Site Scripting (XSS) vulnerability. When processing returns, the backend fails to filter or escape the goodsName parameter, concatenating it directly into the order log description, which the frontend renders using v-html . An attacker with product crea...

CVE-2026-71803

money-pos 1.0 contains a stored Cross-Site Scripting XSS vulnerability. When processing returns, the backend fails to filter or escape the goodsName parameter, directly concatenating it into the order log description; the frontend subsequently renders this content using v-html. An attacker with...

CVE-2026-84232 Pulpcore: python-pulpcore: stored cross-site scripting via inline rendering of uploaded html/svg content

A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served with their original content type e.g., text/html for .html files, image/svg+xml for .svg files and without a Content-Disposition: attachment header when using local filesystem...

CVE-2026-77850 Stored XSS in AshAdmin relationship typeahead via unescaped label_field content

Stored Cross-site Scripting vulnerability in ash-project ashadmin executes attacker-supplied record content as script in an administrator's browser. The relationship typeahead components AshAdmin.Components.Resource.RelationshipField and AshAdmin.Components.Resource.ManagedRelationshipSelectField...

EEF-CVE-2026-77850 Stored XSS in AshAdmin relationship typeahead via unescaped label_field content

Summary Stored Cross-site Scripting vulnerability in ash-project ashadmin executes attacker-supplied record content as script in an administrator's browser. The relationship typeahead components AshAdmin.Components.Resource.RelationshipField and...

CVE-2026-78894

A race condition flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=505991181...

Linux Distros Unpatched Vulnerability : CVE-2026-76098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering...

DEBIAN-CVE-2026-76098

Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering creates deeply nested emphasis tokens from consecutive asterisk characters, and recursive rendering in HTMLRenderer.rendertoken can excee...

AZL-97956 CVE-2026-76098 affecting package python-mistune for versions less than 3.3.4-1

Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering creates deeply nested emphasis tokens from consecutive asterisk characters, and recursive rendering in HTMLRenderer.rendertoken can excee...

CVE-2026-76098

Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering creates deeply nested emphasis tokens from consecutive asterisk characters, and recursive rendering in HTMLRenderer.rendertoken can excee...

CVE-2026-76837 Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name

Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/account/ stores the firstname value verbatim, and the mention renderer in web-frontend/modules/core/editor/mention.js builds its element with a template literal that places the name...

RHSA-2026:54634 Red Hat Security Advisory: webkit2gtk3 security update

Bulletin has no description...

CVE-2026-19559

Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-19559

CVE-2026-19559 is a Google Chrome use-after-free in HTML that enables remote code execution via a crafted HTML page. Affected software: Google Chrome versions prior to 151.0.7922.137 (and cited sources also reference 151.0.7922.138 as the fixed target). Root cause: use-after-free in HTML handling...

EUVD-2026-55993

Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature. The highlight function previously returned the underlying text directly when no search query was supplied, or performed a regex replacement that inserted tags without first...

CVE-2026-73161

CVE-2026-73161 affects certain versions of cti-transmute where the highlight() function mishandled conversion-table values passed to the search highlighting feature. The original implementation could return raw text when no query was supplied or perform a regex replace that inserted tags without...

PT-2026-70101

Name of the Vulnerable Software and Affected Versions cti-transmute affected versions not specified Description The software improperly handles conversion-table values within the search highlighting feature. The highlight function either returns underlying text directly when no search query is...