66 matches found
CVE-2026-41683
i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. Prior to version 3.9.3, i18next-http-middleware wrote user-controlled language values into the Content-Language response header after passing them through utils.escape, which ...
GHSA-C3H8-G69V-PJRG i18next-http-middleware: HTTP response splitting and DoS via unsanitised Content-Language header
Summary Versions of i18next-http-middleware prior to 3.9.3 wrote user-controlled language values into the Content-Language response header after passing them through utils.escape, which is an HTML-entity encoder that does not strip carriage return, line feed, or other control characters. When the...
EUVD-2019-4626
Malware in sbrugna...
ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0 <=1.1.0), ai.stainless:grails-tika (=0.1.0) +2893 more potentially affected by CVE-2025-48795 via org.apache.cxf:cxf-core (>=3.0.0-milestone1 <=3.5.10)
org.apache.cxf:cxf-core MAVEN version =3.0.0-milestone1, =1.0.0, =11.4-37, =3.6.1, =3.11.0, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.1.0.RELEASE - cloud.testload:jmeter-clickhouse-listener =2.00 and more Source cves: CVE-2025-48795 Source...
Description of the security update for SharePoint Server 2019: September 13, 2022 (KB5002258)
Description of the security update for SharePoint Server 2019: September 13, 2022 KB5002258 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and Microsoft SharePoint remote code execution vulnerability. To learn more about the vulnerabilities...
CVE-2019-13075
Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a...
CVE-2019-13075
Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a...
CVE-2019-13075
Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a...
CVE-2019-13075
Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a...
Tor: Detect Tor Browser's language
Summary Some error pages uses Tor Browser's language based text, and iframe can steal it. Details Since the language of Tor Browser is used for the title of the link tag on 404 error page, an attacker can obtain the language of Tor Browser even if the user has set privacy.spoofenglish to 2. I...
ai.idylnlp:idylnlp-nlp-language-detection-tika (>=1.0.0 <=1.1.0), ai.platon.pulsar:pulsar-persist (>=1.9.0 <=1.10.23) +2069 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (>=2.0.10 <=3.1.15)
org.apache.cxf:cxf-rt-transports-http MAVEN version =2.0.10, =1.0.0, =1.9.0, =1.1.7, =1.1.9, =1.2.5, =3.6.1, =3.11.0, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.0.0.RELEASE, =3.1.0.RELEASE and more Source cves: CVE-2018-8039 Source advisory: OSV:GHSA-JC7R-V6FG-2GPF...
SMS+Car Language Detection - External URLs, Possible privilege escalation, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application SMS+Car Language Detection published at the 'play' market has multiple vulnerabilities...
focused Web Crawler: ACHE
ACHE is a focused Web crawler that can be customized to search for pages the belong to a given topic or have a given property. To configure ACHE, you need to: define a topic of interest e.g., Ebola, terrorism, cooking recipes; create a model to detect Web pages that belong to this topic; and...
PortailPhp 2.0 (idnews) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ==================================================== PortailPhp 2.0 idnews Remote SQL Injection Exploit ==================================================== use LWP::Simple; print " Exploit Coded c by xoron Portail PHP v20 index.php Remote...
Invision Power Board <= 2.1.5 search.php Remote Code Execution Exploit
Exploit for unknown platform in category web applications ====================================================================== Invision Power Board pr00f 0f c0ncept remote command execution. vuln credits goes to IceShaman. works only if you have perms to post a comment. Exploit with replye is i...
Windows Upgrade Language detectoid (zh-tw)
This is the detectoid to be used for detecting Windows language locale for OS Upgrade updates...
Windows Upgrade Language detectoid (lv-lv)
This is the detectoid to be used for detecting Windows language locale for OS Upgrade updates...
Windows Upgrade Language detectoid (nl-nl)
This is the detectoid to be used for detecting Windows language locale for OS Upgrade updates...
D_Server_Local_DEU
Detects server language - DEU...
D_Server_Local_CHT
Detects Server language - CHT...