1595 matches found
WordPress HTML5 Video Player < 2.5.27 - SQL Injection
The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks id: CVE-2024-5522 info: name: WordPress HTML5 Video Player 2.5.27 - SQL Injection...
WordPress HTML5 Video Player - SQL Injection
WordPress HTML5 Video Player plugin is vulnerable to SQL injection. An unauthenticated attacker can exploit this vulnerability to perform SQL injection attacks. id: CVE-2024-1061 info: name: WordPress HTML5 Video Player - SQL Injection author: xxcdd severity: critical description: | WordPress HTM...
seeker
Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...
CVE-2021-21972
CVE-2021-21972 Description The vSphere Client HTML5 contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts...
CVE-2026-126063
A flaw was found in Nokogiri. The HTML5 serializer fails to properly escape text inside noscript elements and angle brackets within attribute values. A remote attacker could exploit this vulnerability by submitting crafted HTML to an application that allows noscript tags and re-serializes the...
VUL4J-59
jsoup: Java HTML parser that makes sense of real-world HTML soup. jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-like methods. jsoup implements the WHATWG HTML5 specification...
CVE-2024-5522-PoC
CVE-2024-5522-PoC : HTML5 Video Player 2.5.27 - Unauthenticated SQLi The plugin does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks setup script: 1. git clone...
XSSYA-V-2.0
XSSYA-V-2.0 XSS Vulnerability Confirmation XSSYA is a Cross Site Scripting Scanner & Vulnerability Confirmation Working in two Methods • Method number 1 for Confirmation Request and Response • Method number 2 for Confirmation Execute encoded payload and search for the same payload in web HTML cod...
Action View: Possible XSS vulnerability in text helpers
Impact With the HTML5 sanitizer Rails::HTML5::Sanitizer, the default vendor on CRuby for applications using loaddefaults 7.1 or later, Nokogiri before 1.19.5 serializes unescaped inside attribute values. The Action View text helpers highlight and simpleformat sanitize their input and then process...
GHSA-2P2F-4RQ4-GJWC Action View: Possible XSS vulnerability in text helpers
Impact With the HTML5 sanitizer Rails::HTML5::Sanitizer, the default vendor on CRuby for applications using loaddefaults 7.1 or later, Nokogiri before 1.19.5 serializes unescaped inside attribute values. The Action View text helpers highlight and simpleformat sanitize their input and then process...
EUVD-2026-122928
Action View: Possible XSS vulnerability in text helpers...
CVE-2026-126205
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Prior to 2.25.3, the Loofah HTML5 sanitizer checks href and xlink:href on elements in SVGALLOWLOCALHREF with a regular expression whose line anchor and newline-matching...
CVE-2026-126206
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. In 2.25.2, Loofah::HTML5::Scrub.alloweduri? treats a data URI mediatype containing the HTML5 named solidus reference as malformed and falls back to the allowed text/plain, whi...
CVE-2026-126207
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Prior to 2.25.3, Loofah::HTML5::Scrub.scrubcss checks only the first parse of a style attribute, then rebuilds CSS with identifier escapes decoded so escaped parentheses,...
Loofah: CSS url() sanitization bypass via escaped parentheses
Summary Loofah::HTML5::Scrub.scrubcss rejected any property whose top-level Crass tokens included a :url or :badurl, and left url out of the allowed CSS functions. Both checks ran only against the first parse of the style attribute. When scrubcss rebuilt each property it emitted identifiers with...
CVE-2026-126209
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. From 2.25.0 until 2.25.3, Loofah::HTML5::Scrub.alloweduri? strips whitespace and control characters before decoding a semicolon-less numeric character reference, changing wher...
Loofah allowed_uri? treats data:text/html as safe text/plain
Summary Loofah::HTML5::Scrub.alloweduri? returns true for a data: URI whose mediatype is written with the HTML5 named character reference in place of the solidus. Loofah reads that mediatype as malformed and falls back to the allowed text/plain, while a browser decodes the reference and reads the...
CVE-2026-126207 Loofah: CSS url() sanitization bypass via escaped parentheses
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Prior to 2.25.3, Loofah::HTML5::Scrub.scrubcss checks only the first parse of a style attribute, then rebuilds CSS with identifier escapes decoded so escaped parentheses,...
CVE-2026-126207
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Prior to 2.25.3, Loofah::HTML5::Scrub.scrubcss checks only the first parse of a style attribute, then rebuilds CSS with identifier escapes decoded so escaped parentheses,...
Loofah: Mutation XSS in the HTML5 scrubbers through unescaped attribute values
Summary Loofah's HTML5 scrubbers could emit output that a browser parses into different markup, allowing mutation XSS. Nokogiri in attribute values. When the output contained certain MathML, a browser treated markup inside an allowed attribute as live HTML. The :strip scrubber is affected in ever...