148 matches found
Nuxt: Unauthorized Component Instantiation via Server Island Props
Impact Nuxt server islands accept props via the /nuxtisland/ endpoint. When an application has a server island component that forwards props directly into Vue's dynamic component resolution , resolveDynamicComponent, or h, an attacker can pass a plain string value rather than a component definiti...
CVE-2026-48761
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 until 6.4.41, 7.4.13, and 8.0.13, UrlAttributeSanitizer::getSupportedAttributes omitted URL-bearing attributes on , , , and , and URLs inside content bypassed URL sanitization, allowing...
CVE-2026-48761
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 until 6.4.41, 7.4.13, and 8.0.13, UrlAttributeSanitizer::getSupportedAttributes omitted URL-bearing attributes on , , , and , and URLs inside content bypassed URL sanitization, allowing...
DEBIAN-CVE-2026-0540
DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through 2.5.8, fixed in commit 2726c74, contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting five missing rawtext elements noscript, xmp, noembed, noframes, iframe in the SAFEFORXML regex. Attacke...
EUVD-2026-9303
DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through 2.5.8, fixed in commit 729097f, contain a cross-site scripting vulnerability that allows attackers to bypass attribute sanitization by exploiting five missing rawtext elements noscript, xmp, noembed, noframes, iframe in the SAFEFORXML regex. Attacke...
CVE-2019-12136
There is XSS in BoostIO Boostnote 0.11.15 via a label named mermaid, as demonstrated by a crafted SRC attribute of an IFRAME element...
EUVD-2013-5244
Malware in sbrugna...
EUVD-2013-2843
Malware in sbrugna...
EUVD-2010-2011
Malware in sbrugna...
EUVD-2011-3035
Malware in sbrugna...
EUVD-2005-4849
Malware in sbrugna...
EUVD-2012-2795
Malware in sbrugna...
EUVD-2012-2559
Malware in sbrugna...
EUVD-2013-0247
Malware in sbrugna...
EUVD-2019-3833
Malware in sbrugna...
EUVD-2015-1444
Malware in sbrugna...
EUVD-2013-5438
Malware in sbrugna...
EUVD-2018-3700
Malware in sbrugna...