1468 matches found
PFQ
PFQ v6.2 Introduction PFQ is a functional framework designed for the Linux operating system built for efficient packets capture/transmission 10G, 40G and beyond, in-kernel functional processing, kernel-bypass and packets steering across groups of sockets/end-points. It is highly optimized for...
apache-commons-lang2
This repository does not have a README...
CVE-2026-1434
CVE-2026-1434: Omega-PSIR is vulnerable to Reflected XSS via the lang parameter. An attacker can craft a... Overview Field| Details ---|--- CVE ID| CVE-2026-1434 Severity| MEDIUM Advisory| N/A Discovered by| Lukasz Rybak Affected Products See advisory for details. CWE Classification CWE-79:...
CVE-2024-7928
FastAdmin Path Traversal Vulnerability exploit A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal...
Nokogiri: Use-After-Free in Nokogiri when replacing an attribute value
Summary Nokogiri's CRuby native extension could leave a Ruby wrapper pointing to freed memory when replacing the value of an existing XML attribute via Nokogiri::XML::Node= or Nokogiri::XML::Nodelang=. If Ruby code had already accessed the attribute's child nodes, replacing the value could free...
GHSA-3W22-6JFG-527W Nokogiri: Use-After-Free in Nokogiri when replacing an attribute value
Summary Nokogiri's CRuby native extension could leave a Ruby wrapper pointing to freed memory when replacing the value of an existing XML attribute via Nokogiri::XML::Node= or Nokogiri::XML::Nodelang=. If Ruby code had already accessed the attribute's child nodes, replacing the value could free...
Use After Free
Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Use After Free in the Nokogiri::XML::Node= and Nokogiri::XML::Nodelang= methods. Replacing the value of an existing attribute whose child nodes were already accessed frees those...
CVE-2026-126064 Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Node#[]=` or `#lang=`
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node= or Nokogiri::XML::Nodelang= replaces an existing attribute value after code has accessed the...
CVE-2026-126064
The Nokogiri library for the Ruby programming language contains a Use-After-Free vulnerability in its CRuby native extension prior to version 1.19.5 . The issue occurs when using Nokogiri::XML::Node#[]= or Nokogiri::XML::Node#lang= to replace an existing attribute value after the code has already...
CVE-2026-126064 Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Node#[]=` or `#lang=`
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node= or Nokogiri::XML::Nodelang= replaces an existing attribute value after code has accessed the...
CVE-2026-126064 Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Node#[]=` or `#lang=`
Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.5, the CRuby native extension can leave Ruby wrappers pointing to freed memory when Nokogiri::XML::Node= or Nokogiri::XML::Nodelang= replaces an existing attribute value after code has accessed the...
PT-2026-144663
Name of the Vulnerable Software and Affected Versions Nokogiri versions prior to 1.19.5 Description The CRuby native extension can leave Ruby wrappers pointing to freed memory when replacing an existing attribute value. This occurs when the Nokogiri::XML::Node= or Nokogiri::XML::Nodelang= functio...
Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates
Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 12.0.29 and 13.7.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported vulnerabilities...
CVE-2026-124424
WWBN AVideo contains a path traversal vulnerability in plugin/AI/receiveAsync.json.php that allows holders of any valid AI token to write arbitrary .vtt files by injecting traversal sequences into the unsanitized responselang parameter. Attackers can send a type=translation request with a crafted...
EUVD-2026-119576
WWBN AVideo contains a path traversal vulnerability in plugin/AI/receiveAsync.json.php that allows holders of any valid AI token to write arbitrary .vtt files by injecting traversal sequences into the unsanitized responselang parameter. Attackers can send a type=translation request with a crafted...
CVE-2026-124424 WWBN AVideo Path Traversal Arbitrary VTT File Write via receiveAsync.json.php
WWBN AVideo contains a path traversal vulnerability in plugin/AI/receiveAsync.json.php that allows holders of any valid AI token to write arbitrary .vtt files by injecting traversal sequences into the unsanitized responselang parameter. Attackers can send a type=translation request with a crafted...
CVE-2026-124424
WWBN AVideo is vulnerable to a path traversal flaw within the plugin/AI/receiveAsync.json.php component. This vulnerability allows users possessing a valid AI token to write arbitrary .vtt files by injecting traversal sequences into the unsanitized response[lang] parameter. An attacker can trigge...
CVE-2026-124424 WWBN AVideo Path Traversal Arbitrary VTT File Write via receiveAsync.json.php
WWBN AVideo contains a path traversal vulnerability in plugin/AI/receiveAsync.json.php that allows holders of any valid AI token to write arbitrary .vtt files by injecting traversal sequences into the unsanitized responselang parameter. Attackers can send a type=translation request with a crafted...
CVE-2026-124424 WWBN AVideo Path Traversal Arbitrary VTT File Write via receiveAsync.json.php
WWBN AVideo contains a path traversal vulnerability in plugin/AI/receiveAsync.json.php that allows holders of any valid AI token to write arbitrary .vtt files by injecting traversal sequences into the unsanitized responselang parameter. Attackers can send a type=translation request with a crafted...
PT-2026-139940
WWBN AVideo contains a path traversal vulnerability in plugin/AI/receiveAsync.json.php that allows holders of any valid AI token to write arbitrary .vtt files by injecting traversal sequences into the unsanitized responselang parameter. Attackers can send a type=translation request with a crafted...