CVE-2026-48942: Improper Neutralization of Input During Web Page Generation

K2 ≤ 2.26 renders the k2users.image column directly into HTML src attributes via two distinct templates, in both cases without HTML escaping...

PT-2026-41297

Name of the Vulnerable Software and Affected Versions DHTMLX Diagram versions prior to 1.1.1 Description The export module is susceptible to Path Traversal in the src attribute because of insufficient HTML sanitization. An unauthenticated attacker can craft a malicious HTML payload to read...

Multiple Microsoft Windows Media Player vulnerabilities

Buffer overflow on BMP files playing. Buffer overflow on oversized SRC for HTML page with EMBED'ded WMP. May be used for client machine trojaning...