470 matches found
CVE-2024-38475
CVE-2024-38475 POC Credit : All credit to this guy: https://blog.orange.tw/ and https://x.com/orange8361 all i did was make a POC script from his research. Introduction : Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesyste...
CVE-2026-34197-Apache-ActiveMQ-RCE
Fixed the issue where the reverse shell failed because the command was not XML-escaped...
BIT-GOLANG-2026-97030 Recognize yield as regexp preceder keyword in html/template
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...
EUVD-2026-100601
Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network...
Visual Studio Code Remote Code Execution Vulnerability
Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CLEANSTART-2026-ZX34882 trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped
CVE-2026-97030 affects multiple packages. A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. See references for individual vulnerability details...
Rocky Linux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1791818373)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791818373 advisory. - Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content whe...
CLEANSTART-2026-JM42748 Improper escaping of database table names in the CaptureChangeMySQL Processor included with Apache NiFi 1
Security vulnerability affects the apache-nifi package. Improper escaping of database table names in the CaptureChangeMySQL Processor included with Apache NiFi 1...
SUSE CVE-2026-97030
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...
CLEANSTART-2026-JH66547 Improper escaping of output in mod_rewrite in Apache HTTP Server 2
Security vulnerability affects the apache2 package. Improper escaping of output in modrewrite in Apache HTTP Server 2...
AZL-108534 CVE-2026-97030 affecting package tensorflow 2.16.1-11
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...
DEBIAN-CVE-2026-97030
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...
AZL-108299 CVE-2026-97030 affecting package golang 1.27.1-1
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...
AZL-108348 CVE-2026-97030 affecting package gcc 13.2.0-7
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...
AZL-108249 CVE-2026-97030 affecting package golang 1.26.7-1
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...
AZL-108441 CVE-2026-97030 affecting package python-tensorboard 2.16.2-6
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...
CVE-2026-97030 Recognize yield as regexp preceder keyword in html/template
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...
CVE-2026-97030
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...
CVE-2026-97030
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...
CVE-2026-97030
The vulnerability in CVE-2026-97030 involves a trusted template author providing a valid template where the 'yield' keyword was not correctly escaped. This lack of proper escaping allows for potential Cross-Site Scripting (XSS) , as indicated by the CWE-79 classification. The issue has been addre...