109825 matches found
CVE-2020-16947
CVE-2020-16947 This vulnerability occurs in Outlook 2019 16.0.13231.20262 installed on Windows 10 1909 x64 TLDR; I found this bug using winafl fuzzer. This bug occured when parsing html contents. if attacker successfully executes this exploit, it can lead to remote command execution. Details 0:00...
CVE-2026-88783
The Kubio AI Page Builder WordPress plugin before 2.9.3 does not limit its widening of the allowed HTML elements to the editor context, so the wider set is applied when filtering content submitted by unauthenticated users as well, allowing them to store markup which the Kubio AI Page Builder...
ie11_vbscript_exploit
IE11 VBScript Exploit Exploit Generator for CVE-2018-8174 & CVE-2019-0768 RCE via VBScript Execution in IE11 Prerequisite Metasploit msfvenom Usage python ie11vbscript.py Listener IP Listener Port Instruction 1. Use this script to generate "exploit.html" 2. Host the html file on your server 3...
CVE-2026-95323
An ui misrepresentation flaw was found in the Chromium component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/546438368...
Swagger-HTML-Injection-CVE-2025-8191
https://example.com/swagger/swagger.html?configURL=https://raw.githubusercontent.com/mayank-s16/Swagger-HTML-Injection-CVE-2025-8191/refs/heads/main/test.json...
CVE-2026-95321
An ui misrepresentation flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/545879261...
CVE-2026-103626
An incorrect authorization flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553114097...
CVE-2026-95330
An improper state validation flaw was found in the Downloads component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517163294...
CVE-2026-96270 Ultimate Member <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'form_id' Parameter
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formid' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and...
CVE-2026-96270
The Ultimate Member plugin for WordPress (versions up to and including 2.13.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the 'form_id' parameter. The root cause is insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts...
CVE-2026-96270 Ultimate Member <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'form_id' Parameter
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formid' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and...
Apache HTTP Server <=2.4.39 - HTML Injection/Partial Cross-Site Scripting
Apache HTTP Server versions 2.4.0 through 2.4.39 are vulnerable to a limited cross-site scripting issue affecting the modproxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server...
CVE-2026-95337
An ui misrepresentation flaw was found in the Messages component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/514019137...
CVE-2026-104477
A flaw was found in showdown. The link and image parsers fail to properly sanitize or escape double quotation marks in destination URLs when rendering HTML attributes. A remote attacker could exploit this flaw by supplying crafted Markdown input containing malicious event handlers, leading to...
[SECURITY] Fedora 45 Update: xhtml1-dtds-1.0-20020801.26.fc45
This provides the DTDs of the Second Edition of XHTML 1.0, a reformulation of HTML 4 as an XML 1.0 application, and three DTDs corresponding to the ones defined by HTML 4. The semantics of the elements and their attributes are defined in the W3C Recommendation for HTML 4. These semantics provide...
[SECURITY] Fedora 45 Update: libxml2-2.15.4-1.fc45
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...
Linux Distros Unpatched Vulnerability : CVE-2026-103626
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potential...
PT-2026-104528
Name of the Vulnerable Software and Affected Versions Kubio AI Page Builder WordPress plugin versions prior to 2.9.3 Description The plugin fails to restrict the expansion of allowed HTML elements to the editor context. Consequently, this expanded set of allowed elements is applied to content...
CVE-2026-96270: Improper Neutralization of Input During Web Page Generation
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formid' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and...