409 matches found
The vulnerability of the vulnerabilityCheck() function in the parseEnv component of the simple-git library on the Node.js programming platform allows a hacker to bypass existing security mechanisms.
The vulnerability of the vulnerabilityCheck function in the parseEnv component of the simple-git library in the Node.js software platform is related to the use of an incomplete blacklist. Exploitation of this vulnerability could allow a malicious actor to bypass existing security mechanisms...
CVE-2026-103687
A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the function url of the file src/DOMSanitizer.php of the component SVG Sanitization. Such manipulation leads to incomplete blacklist. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-103687 rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist
A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the function url of the file src/DOMSanitizer.php of the component SVG Sanitization. Such manipulation leads to incomplete blacklist. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-103687 rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist
A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the function url of the file src/DOMSanitizer.php of the component SVG Sanitization. Such manipulation leads to incomplete blacklist. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-103687
A vulnerability exists in rhukster dom-sanitizer up to version 1.0.15 within the SVG Sanitization component. The flaw is located in the url function of the src/DOMSanitizer.php file, where manipulation can lead to an incomplete blacklist . This issue allows for potential remote attacks , and expl...
EUVD-2026-90850
A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the function url of the file src/DOMSanitizer.php of the component SVG Sanitization. Such manipulation leads to incomplete blacklist. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-103687 rhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklist
A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the function url of the file src/DOMSanitizer.php of the component SVG Sanitization. Such manipulation leads to incomplete blacklist. It is possible to launch the attack remotely. The exploit has been...
CVE-2026-103687: Incomplete List of Disallowed Inputs
A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the function url of the file src/DOMSanitizer.php of the component SVG Sanitization. Such manipulation leads to incomplete blacklist. It is possible to launch the attack remotely. The exploit has been...
PT-2026-103879
A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the function url of the file src/DOMSanitizer.php of the component SVG Sanitization. Such manipulation leads to incomplete blacklist. It is possible to launch the attack remotely. The exploit has been...
The vulnerability of the Vim text editor, related to the use of an incomplete black list, allows a hacker to execute arbitrary code.
The vulnerability of the Vim text editor is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-90808
A vulnerability was determined in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool.guardcommand/ExecTool.spawn of the file nanobot/agent/tools/shell.py of the component ExecTool. This manipulation causes incomplete blacklist. It is possible to initiate the attack remotely. Patch name:...
CVE-2026-90808 HKUDS nanobot ExecTool shell.py ExecTool._spawn incomplete blacklist
A vulnerability was determined in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool.guardcommand/ExecTool.spawn of the file nanobot/agent/tools/shell.py of the component ExecTool. This manipulation causes incomplete blacklist. It is possible to initiate the attack remotely. Patch name:...
CVE-2026-90808 HKUDS nanobot ExecTool shell.py ExecTool._spawn incomplete blacklist
A vulnerability was determined in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool.guardcommand/ExecTool.spawn of the file nanobot/agent/tools/shell.py of the component ExecTool. This manipulation causes incomplete blacklist. It is possible to initiate the attack remotely. Patch name:...
CVE-2026-90808
HKUDS nanobot versions up to 0.2.1 contain an incomplete blacklist vulnerability in the ExecTool component, specifically in the _guard_command/_spawn functions within nanobot/agent/tools/shell.py. An attacker with low privileges can exploit this remotely (no user interaction required) to achieve ...
EUVD-2026-77768
A vulnerability was determined in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool.guardcommand/ExecTool.spawn of the file nanobot/agent/tools/shell.py of the component ExecTool. This manipulation causes incomplete blacklist. It is possible to initiate the attack remotely. Patch name:...
CVE-2026-90808 HKUDS nanobot ExecTool shell.py ExecTool._spawn incomplete blacklist
A vulnerability was determined in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool.guardcommand/ExecTool.spawn of the file nanobot/agent/tools/shell.py of the component ExecTool. This manipulation causes incomplete blacklist. It is possible to initiate the attack remotely. Patch name:...
PT-2026-91403
A vulnerability was determined in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool. guard command/ExecTool. spawn of the file nanobot/agent/tools/shell.py of the component ExecTool. This manipulation causes incomplete blacklist. It is possible to initiate the attack remotely. Patch...
CVE-2026-90808: Incomplete List of Disallowed Inputs
A vulnerability was determined in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool.guardcommand/ExecTool.spawn of the file nanobot/agent/tools/shell.py of the component ExecTool. This manipulation causes incomplete blacklist. It is possible to initiate the attack remotely. Patch name:...
The vulnerability of the intel_pmu_enable_event() function in the arch/x86/events/intel/core.c module, which is part of the Linux operating system’s x86 kernel support, allows a hacker to trigger a service failure.
The vulnerability of the intelpmuenableevent function in the arch/x86/events/intel/core.c module, which is part of the Linux operating system’s x86 kernel support, relates to the use of an incomplete blacklist during the processing of input data. Exploiting this vulnerability could allow a...
