109807 matches found
firefox: Use-after-free in the DOM: Core & HTML component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...
CVE-2023-2859
CVE-2023-2859: Внедрение сохранённого HTML-кода в folderName, затрагивающее администратора в TeamPass 3.0.9 — M Nadeem Qazi Привет, Я обнаружил серьёзную уязвимость в приложении nilsteampassnet/teampass, которая связана с внедрением сохранённого HTML-кода в поле FolderName. Вставляя вредоносный...
intelspy
Perform automated network reconnaissance scans to gather network intelligence. IntelSpy is a multi-threaded network intelligence tool which performs automated network services enumeration. It performs live hosts detection scans, port scans, services enumeration scans, web content scans,...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.17 security and extras update
Red Hat OpenShift Container Platform release 4.22.17 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.36 security and extras update
Red Hat OpenShift Container Platform release 4.21.36 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...
CVE-2026-39200
CVE-2026-39200 — Отражённый межсайтовый скриптинг XSS в Toko Online RotI Краткое описание В параметре запроса produk веб-приложения Toko Online RotI выявлена уязвимость отражённого межсайтового скриптинга Reflected Cross-Site Scripting, XSS. Приложение не выполняет HTML-кодирование данных,...
CVE-2026-73321
CVE-2026-73321: PHP worker stack overflow through nested BBCode XenForo before 2.3.13 can exhaust a PHP worker through deeply nested BBCode. Result The public editor/to-html route sends guest-supplied BBCode through XenForo's recursive parser and renderer. It does not apply a raw-length or nestin...
CVE-2023-4357-Exploitation
Эксплуатация CVE-2023-4357 Проект по сетевой безопасности Описание Недостаточная проверка недоверенных входных данных в XML в Google Chrome до версии 116.0.5845.96 позволяла удалённому злоумышленнику обходить ограничения доступа к файлам с помощью специально созданной HTML-страницы. Воспроизведен...
CLEANSTART-2026-MM79132 Actions which insert URLs into the content attribute of HTML meta tags are not escaped
Security vulnerability affects the temporal-server package. Actions which insert URLs into the content attribute of HTML meta tags are not escaped...
CVE-2026-105742
A flaw was found in docling. This vulnerability can lead to information disclosure of sensitive credentials, such as API keys and session tokens. When remote image fetching is enabled, the HTML image loader fails to restrict custom request headers to the document's original domain. A remote...
CVE-2026-105750
A flaw was found in docling. This vulnerability can lead to information disclosure when HTML page rendering is enabled. The document rendering backend fails to enforce local file access restrictions or confine requests to the source document directory. An attacker could exploit this issue by...
SUSE SLES15 Security Update : rubygem-rails-html-sanitizer (SUSE-SU-2026:4445-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4445-1 advisory. This update for rubygem-rails-html-sanitizer fixes the following issue: - CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when t...
PT-2026-106872
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue in the Browser component allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after free ...
CVE-2026-105750 Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.82.0 until 2.118.1, HTMLBackendOptionsrenderpage=True permits file URLs because HTMLDocumentBackend.getbrowserrequestblockreason does not enforce the...
CVE-2026-105749 Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.0.0 until 2.131.0, the HTML, JATS, OpenDocument spreadsheet, and BoxNote backends, including docling/backend/htmlbackend.py, docling/backend/jatsbackend.py, and...
CVE-2026-105748 Docling: Crafted DoclingDocument JSON embeds local image files into converted output
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.16.0 until 2.131.0, the InputFormat.JSONDOCLING backend in docling/backend/json/doclingjsonbackend.py validates serialized DoclingDocument input without rejecting...
CVE-2026-105748 Docling: Crafted DoclingDocument JSON embeds local image files into converted output
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.16.0 until 2.131.0, the InputFormat.JSONDOCLING backend in docling/backend/json/doclingjsonbackend.py validates serialized DoclingDocument input without rejecting...
CVE-2026-105748 Docling: Crafted DoclingDocument JSON embeds local image files into converted output
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.16.0 until 2.131.0, the InputFormat.JSONDOCLING backend in docling/backend/json/doclingjsonbackend.py validates serialized DoclingDocument input without rejecting...
CVE-2026-105742
The docling library (versions 2.95.0 through 2.132.0 ) contains a vulnerability in the HTML image resource loader located at docling/backend/utils/image_resource_loader.py. When enable_remote_fetch=True and fetch_images=True are set, the loader forwards custom headers—such as API keys and cookies...