2982 matches found
PT-2026-65301
A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the serialized capture tree directly into an inline JavaScript block using the Jinja safe filter. Because the tree data can contain values derived from captured and potentially...
Denial Of Service (DoS)
pypdf is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of unterminated inline images using the ASCII85 or ASCIIHex filters during PDF parsing, which allows an attacker to craft a malicious PDF that triggers an infinite loop and causes a denial of service...
Denial Of Service (DoS)
pypdf is vulnerable to Denial of Service DoS. The vulnerability is due to improper detection of inline image end markers in PDF page content streams, which allows an attacker to craft a malicious PDF that triggers an infinite loop during parsing and causes a denial of service...
pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)
Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page with a not terminated inline image, as done when extracting the page text for example. It only affects the ASCII85 and ASCIIHex filters. Patches This...
EUVD-2026-42365
pypdf: Possible infinite loop for not terminated inline images ASCII85 and ASCIIHex filter...
GHSA-G867-7843-WF8Q pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)
Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page with a not terminated inline image, as done when extracting the page text for example. It only affects the ASCII85 and ASCIIHex filters. Patches This...
GHSA-5XF7-4P34-54QR pypdf: Possible infinite loop for not terminated inline images
Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page with a not terminated inline image, as done when extracting the page text for example. Patches This has been fixed in pypdf==6.14.1. Workarounds If yo...
EUVD-2026-42366
pypdf: Possible infinite loop for not terminated inline images...
CVE-2026-65756
Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript...
CVE-2026-65756
Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript...
CVE-2026-65756 Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension
Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript...
CVE-2026-65756 Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension
Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript...
EUVD-2026-47913
Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript...
CVE-2026-65756
The Joomla Extension by regularlabs.com contains an XSS vector within the Keyboard Shortcuts extension . The vulnerability occurs because the shortcut configuration accepts arbitrary inline JavaScript . No specific impacted versions, root cause files, or remediation steps are provided in the docu...
PT-2026-63613
Shortcut configuration accepted arbitrary inline JavaScript...
tcpreplay 4.5.4
tcpreplay is a BSD-style licensed tool to replay saved tcpdump files at arbitrary speeds. It provides a variety of features for replaying traffic for both passive sniffer devices as well as inline devices such as routers, firewalls, and intrusion detection systems. Many NIDSs fare poorly when...
CVE-2026-65756: Improper Neutralization of Input During Web Page Generation
Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript...
Dompdf: Uncontrolled resource consumption based on declared BMP dimensions
Summary dompdf accepts a BMP image and generates a PDF-compatible PNG based only on its declared header dimensions and never bounds width × height before the image is converted through GD. A 58-byte BMP whose header declares e.g. 6000×6000 is accepted and later drives imagecreatetruecolor$width,...
GHSA-CJ9H-QX8G-PQ2G n8n: Shared-Workflow Editor Can Exfiltrate Credentials via Inline Sub-Workflow JSON
Impact n8n's credential-access checks validated only a node's top-level credentials, not credentials referenced inside an Execute Sub-workflow node's inline workflow JSON. A member with editor access to a shared workflow could reference a credential they were not permitted to use inside that inli...
