RockyLinux 9 : thunderbird (RLSA-2026:49921)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:49921 advisory. firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript:...

PT-2026-68808

Name of the Vulnerable Software and Affected Versions AIL Framework affected versions not specified Description A reflected cross-site scripting issue exists in the '/tag/add tags' endpoint. When a tag operation fails, the application returns the error value as an HTML response via the strres0...

CVE-2026-71437: Improperly Controlled Modification of Object Prototype Attributes

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 11.5.0 until 11.16.1, Mermaid Architecture Diagrams are vulnerable to prototype pollution when a diagram defines a group with an id of proto. Because the group id is used directly ...

CVE-2026-71445: Improper Neutralization of Input During Web Page Generation

AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/addtags endpoint. When an error occurred while processing a tag operation, the application returned the error value directly as an HTML response using strres0. If attacker-controlled input was included in the...

PT-2026-68584

Name of the Vulnerable Software and Affected Versions Custom CSS and JavaScript versions prior to 2.0.17 Description An issue exists that allows unauthenticated users to cause sensitive data exposure. Recommendations Update to a version newer than 2.0.16...

CVE-2026-48081: Improper Neutralization of Input During Web Page Generation

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANTADMIN can store javascript: URLs in the tenant links configuration website, imprint, privacyStatement. These values are returned to the patient-facing landin...

CVE-2026-66843: Inclusion of Functionality from Untrusted Control Sphere

Inclusion of Functionality from Untrusted Control Sphere vulnerability in the HTML5 scrubber in rrrene htmlsanitizeex allows a remote attacker to load a document of their choosing into a trusted page via the data attribute of an element in sanitized HTML. object is the one URI-bearing element in...

PT-2026-68981

Impact Mermaid radar diagrams allow arbitrary large values for ticks, which can cause high CPU usage, freezing the webpage/JavaScript process for long periods of time, until the process is eventually killed due to OOM/running out of memory. Proof-of-concept txt radar-beta axis a, b curve c 1, 1...

Joern 4.0.597

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

PT-2026-68743

Name of the Vulnerable Software and Affected Versions OpenReception versions prior to 1.0.2 Description A TENANT ADMIN can store javascript: URLs within the tenant links configuration, specifically in the website, imprint, and privacyStatement variables. These values are returned to the...

PT-2026-69021

Name of the Vulnerable Software and Affected Versions pdfjs-dist affected versions not specified Description When enableScripting is set to true and no Content Security Policy CSP is configured to disallow script-src, loading a malicious PDF can lead to the execution of unrestricted...

CVE-2026-71439: Unchecked Input for Loop Condition

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 11.6.0 until 11.16.1, Mermaid Radar Diagrams allow arbitrary large values for the ticks parameter, which can cause high CPU usage and freeze the rendering webpage or JavaScript...

PT-2026-69019

viperjs is a JavaScript engine intended to run untrusted script inside a host application, so script text is data rather than a trusted caller and a panic reachable from script is a denial of service in the embedder's process. A divisor whose magnitude lands exactly on the engine's internal limb...

PT-2026-68816

Name of the Vulnerable Software and Affected Versions CTI-Transmute affected versions not specified Description Stored cross-site scripting occurs due to insufficient neutralization of Vue template expression delimiters in server-rendered user-controlled data. An unauthenticated attacker can inje...

PT-2026-68809

Name of the Vulnerable Software and Affected Versions AIL Framework affected versions not specified Description A stored cross-site scripting issue exists in the crawler domain view. The application embeds crawled URLs directly into a JavaScript onclick handler used to display stored screenshots...

From Documentation to Zero-Day Vulnerabilities: LLM-Driven Fuzzing of JavaScript Engines in PDF Readers

Existing fuzzers for PDF readers rely on simple test cases that involve only individual API calls, leading to limited coverage and potentially missing vulnerabilities that require sequences of API calls. To address these limitations, we propose PDFuzzer, a novel PDF engine fuzzer that automatical...

CVE-2026-66683: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript = 2.0.16 versions...

AlmaLinux 10 : firefox (ALSA-2026:47101)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:47101 advisory. firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript:...

katana v1.7.0

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

CVE-2026-66298 JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts

Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger session-wide keyboard shortcuts, including forced evaluation of all cells and runtime restart. Livebook's JS-view feature renders notebook-defined JavaScript inside a sandboxed,...