65900 matches found
CVE-2026-54889
Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':todelta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':defaultconvertnode/3 in...
CVE-2026-13574
creationtimestamp| type| source ---|---|--- 2026-06-29 20:15:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphck3r2sp23...
CVE-2026-57957
creationtimestamp| type| source ---|---|--- 2026-06-29 19:13:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph72vaeiu2n 2026-06-29 21:34:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphgxdxcgj2k...
CVE-2026-54889 Unsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS)
Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':todelta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':defaultconvertnode/3 in...
CVE-2026-54889
Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':todelta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':defaultconvertnode/3 in...
CVE-2026-54889 Unsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS)
Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':todelta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':defaultconvertnode/3 in...
EEF-CVE-2026-54889 Unsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS)
Summary Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':to\delta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':default\convert\node/3...
CVE-2026-54889 Unsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS)
Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':todelta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':defaultconvertnode/3 in...
CVE-2026-41991
A flaw was found in the gzexe utility of GNU gzip. When the mktemp utility is not available, gzexe creates temporary files with predictable names based on the process ID. A local attacker can exploit this by pre-creating a symbolic link to an arbitrary file at the predicted temporary file path...
CVE-2026-11720
creationtimestamp| type| source ---|---|--- 2026-06-29 18:44:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5g46kci2e 2026-06-29 22:03:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphikpwkbb2m 2026-07-02 04:37:07+00:00| seen|...
CVE-2026-57951
creationtimestamp| type| source ---|---|--- 2026-06-29 18:42:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5ckshvh2o 2026-06-29 21:17:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphfyab5j72k...
CVE-2025-70099
creationtimestamp| type| source ---|---|--- 2026-06-29 18:38:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mph537qtgs2y...
CVE-2026-56782
creationtimestamp| type| source ---|---|--- 2026-06-29 18:34:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph4uzdfuk25 2026-06-29 22:40:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphkmtrak22m 2026-07-01 12:00:04+00:00| confirmed|...
CVE-2026-35062
creationtimestamp| type| source ---|---|--- 2026-06-29 18:21:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph45axirc25...
CVE-2026-34176
creationtimestamp| type| source ---|---|--- 2026-06-29 18:20:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph44fchn42b...
CVE-2026-54826
creationtimestamp| type| source ---|---|--- 2026-06-29 18:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mph3tveglw2i...
CVE-2026-12912
creationtimestamp| type| source ---|---|--- 2026-06-29 17:51:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph2hxypn322 2026-06-29 20:20:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphcssleox2p 2026-07-03 17:50:34+00:00| seen|...
CVE-2026-13588
creationtimestamp| type| source ---|---|--- 2026-06-29 17:50:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph2fqub6f2o 2026-06-29 20:02:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphbsix7rl2h 2026-06-29 20:38:53+00:00| seen|...
atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen
A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...