extract-zip Symbolic Link RCE

The vulnerability of the npm library extract-zip’s mechanism for handling symbolic links is related to errors in link processing. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

Microsoft Partner Center Hypertext Link Error

The vulnerability of the Microsoft Partner Center software is related to errors in processing hypertext links. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the MarkdownBody class, where user-supplied markdown content is rendered without proper URL sanitization due to an overridden urlTransform function. An attacker can execute arbitrary JavaScript in the context...

Server-side Request Forgery (SSRF)

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the EPG link processing, which fails to properly validate URLs using the intended isSSRFSafeURL function. An attacker can caus...

CVE-2026-25185

Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-10655

Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-25185

Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-25185

Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-25185: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-24853 Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Header Link processing

A carefully crafted request when creating a header link using the wiki markup syntax, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Further research by the JSPWiki team showed that the markdown parser allowed this...

CVE-2025-24853

The Apache JSPWiki software is vulnerable to Cross-Site Scripting (XSS) due to insufficient sanitization when processing wiki markup and markdown. A carefully crafted request used during the creation of a header link can trigger the execution of arbitrary JavaScript in a victim's browser. This fl...

Nomad Application Hypertext Link Data Compromise

The vulnerability of Nomad application developers is related to errors in processing hypertext links. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

Acronis Backup Data Restoration Privilege Escalation

The vulnerability of the backup and data restoration plugins on Acronis Backup software for computers and servers, as well as for cPanel & WHM, Plesk, and DirectAdmin operating systems on Linux, is related to errors in link processing. Exploiting this vulnerability allows a malicious actor to...

PT Application Inspector Privilege Escalation

The vulnerability of the PT Application Inspector’s software for detecting vulnerabilities and errors is related to errors in link processing. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain unauthorized access to protected information...

PT-2023-6373 · Wago · Wago

Name of the Vulnerable Software and Affected Versions: Wago products affected versions not specified Description: The issue allows a remote attacker with administrative privileges to access files through an undocumented local file inclusion. This access is logged in a different log file than...

Acronis Agent Link Processing

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to errors in handling links. Exploiting this vulnerability can allow attackers to enhance their privileges...

Acronis Cyber Protect Home Office Link Processing

The vulnerability of the Acronis Cyber Protect Home Office backup and recovery software is related to errors in handling links. Exploiting this vulnerability can allow attackers to enhance their privileges...

Mozilla Firefox Local Path Access

The vulnerability of the Mozilla Firefox browser is related to errors in processing hypertext links. Exploiting this vulnerability allows an attacker to convert a URL address into a local path and gain unauthorized access to protected information...

McAfee Total Protection Privilege Escalation

The vulnerability of the McAfee Total Protection antivirus protection lies in errors in processing symbolic links. Exploiting this vulnerability can allow attackers to enhance their privileges...

Firefox Android Hypertext Link Access Confidential Data

The vulnerability of the Firefox browser for Android is related to errors in processing hypertext links. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...