CVE-2026-34098

CVE-2026-34098: Guardian Language-System contains an XSS in media.php via unsanitized id parameter (GET). The id value is inserted into HTML source and form actions (lines 119, 129), enabling script injection in a victim’s browser session. Affected: Guardian Language-System; vulnerability manifes...

CVE-2026-34097 Guardian Language-System XSS via id Parameter in text_file.php

Guardian language-system fails to sanitize the id GET parameter before inserting it into multiple HTML form action attributes in textfile.php lines 94, 101, 323, 403, 826, 852. An authenticated attacker can craft a URL that injects script tags executing in the victim's browser session...

CVE-2026-34097

Guardian language-system fails to sanitize the id GET parameter before inserting it into multiple HTML form action attributes in textfile.php lines 94, 101, 323, 403, 826, 852. An authenticated attacker can craft a URL that injects script tags executing in the victim's browser session...

CVE-2026-34097

CVE-2026-34097 concerns Guardian Language-System. The vulnerability arises because text_file.php fails to sanitize the GET parameter id before it is inserted into multiple HTML form action attributes (lines 94, 101, 323, 403, 826, 852). This allows an authenticated attacker to craft a URL that in...

ECHO-43E8-913B-E4C1

Bulletin has no description...

CVE-2026-20193

creationtimestamp| type| source ---|---|--- 2026-07-01 15:44:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpluclzwsd2u...

ECHO-5B3D-0336-BA8D

Bulletin has no description...

ECHO-5B7F-46E7-0A8B

Bulletin has no description...

ECHO-B0ED-6C34-CF81

Bulletin has no description...

ECHO-5700-0D8E-2784

Bulletin has no description...

ECHO-0136-EE3A-548A

Bulletin has no description...

ECHO-BBC8-AEE1-937D

Bulletin has no description...

ECHO-A21B-9EF1-9834

Bulletin has no description...

ECHO-FF4F-EC7B-6024

Bulletin has no description...

CVE-2026-24249

NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure...

GHSA-65RF-W3QG-H7VH vulnerabilities

Vulnerabilities for packages: firefox-esr...

GHSA-65F9-WQXF-MH9R vulnerabilities

Vulnerabilities for packages: firefox-esr...

GHSA-V49M-R4W3-2P5X vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-F4HM-8H94-GVP6 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-6CV4-3H2G-632H vulnerabilities

Vulnerabilities for packages: firefox...