CLSA-2026-1790598013 TuxCare security update for markdown-it (1 CVE)

TuxCare rebuilt markdown-it to address 1 CVE. Fixed in 13.0.2-tuxcare.2...

CVE-2026-20841

CVE-2026-20841 - Удаленное выполнение кода в Windows Notepad RCE Репозиторий для исследований в области безопасности и технического анализа ⚠️ Этот репозиторий предназначен только для образовательных, защитных и исследовательских целей. 📖 Обзор CVE-2026-20841 — это критическая уязвимость удаленног...

engagement-mgr

Engagement Manager Engagement Manager는 공격적 보안 인게이지먼트를 추적하기 위한 웹 애플리케이션입니다. Next.js, Prisma, PostgreSQL로 구축된 현대적인 UI를 갖추고 있습니다. 이 앱에는 캘린더, 인게이지먼트, 클라이언트, 연락처, 파인딩, 운영자가 포함됩니다. Lee Baird @discoverscripts Jay "L1ghtn1ng" Townsend @jaytownsend1 스크린샷 목차 스크린샷 파인딩 작성 및 PDF 보고서 생성 보고 보안 및 배포 검증 사전 요구 사항 ...

CVE-2022-41220

Описание CVE-2022-41220 md2roff 1.9 подвержен переполнению буфера на основе стека, которое возникает при обработке Markdown-файла, содержащего большое количество подряд идущих символов. Воспроизведение Чтобы воспроизвести уязвимость, скачайте уязвимую версию md2roff версия 1.9: git clone...

CVE-2024-44337

CVE-2024-44337 Пакет «github.com/gomarkdown/markdown» — это библиотека Go для разбора Markdown-текста и преобразования его в HTML. В псевдоверсии 'v0.0.0-20240729232818-a2a9c4f', соответствующей коммиту 'a2a9c4f76ef5a5c32108e36f7c47f8d310322252' и более ранних, в функции paragraph файла...

Cybersecurity-Handbook

📚 Cybersecurity Handbook An open-source cybersecurity knowledge base for students, professionals, and self-learners — built as structured notes, hands-on labs, and real-world concepts you can search and navigate visually. Built with Quartz • Powered by Markdown • Community Driven • MIT Licensed...

CVE-2023-43263

CVE ID : CVE-2023-43263 취약점 유형 : 크로스 사이트 스크립팅XSS 설명 : Froala Editor v.4.1.1의 크로스 사이트 스크립팅XSS 취약점으로 인해 공격자가 Markdown 구성 요소를 통해 임의의 코드를 실행할 수 있습니다. 재현 단계 : Markdown 구성 요소 입력에 페이로드를 입력합니다: 참조 : 1. https://vulners.com/cve/CVE-2023-43263 2. https://froala.com 3. https://www.youtube.com/watch?v=-dXipoq...

CVE-2022-34913

Описание CVE-2022-34913 md2roff 1.7 страдает от переполнения стекового буфера через Markdown-файл, содержащий большое количество последовательных обрабатываемых символов. Воспроизведение Для воспроизведения уязвимости необходимо загрузить уязвимую версию md2roff версия 1.7: git clone...

DEBIAN-CVE-2026-100691

Hugo versions 0.75.0 through 0.165.x contain a stored cross-site scripting vulnerability: the syntax highlighter does not escape the lineAnchors option before passing it to Chroma, which writes the value verbatim into the id and href attributes of the generated line-number markup. A crafted...

CVE-2026-100691

Hugo versions 0.75.0 through 0.165.x contain a stored cross-site scripting vulnerability: the syntax highlighter does not escape the lineAnchors option before passing it to Chroma, which writes the value verbatim into the id and href attributes of the generated line-number markup. A crafted...

EUVD-2026-87664

Hugo versions 0.75.0 through 0.165.x contain a stored cross-site scripting vulnerability: the syntax highlighter does not escape the lineAnchors option before passing it to Chroma, which writes the value verbatim into the id and href attributes of the generated line-number markup. A crafted...

CVE-2026-100691

Hugo versions 0.75.0 through 0.165.x contain a stored cross-site scripting vulnerability: the syntax highlighter does not escape the lineAnchors option before passing it to Chroma, which writes the value verbatim into the id and href attributes of the generated line-number markup. A crafted...

PT-2026-99362

Name of the Vulnerable Software and Affected Versions Hugo versions 0.75.0 through 0.165.x Description A stored cross-site scripting issue exists because the syntax highlighter fails to escape the lineAnchors option before passing it to Chroma. This causes the value to be written verbatim into th...

K000163420: Python-Markdown vulnerability CVE-2025-69534

Security Advisory Description Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Because Python-Markdown does not catch this exception, any application that processe...

BIT-GITLAB-2026-78252 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user could have induced a targeted user to perform unintended state-changing HTTP requests due to improper...

PT-2026-98982

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user could have induced a targeted user to perform unintended state-changing HTTP requests due to improper...

CLSA-2026-1790161417 TuxCare security update for markdown-it (1 CVE)

TuxCare rebuilt markdown-it to address 1 CVE. Fixed in 4.4.0-tuxcare.2...

CVE-2026-77912

A stored cross-site scripting XSS vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to inject arbitrary HTML attributes into rendered Markdown because the Markdown rendering pipeline rewrote quote characters in already-sanitized HTML without...

CVE-2026-77912 Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed HTML attribute injection via the Markdown rendering pipeline

A stored cross-site scripting XSS vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to inject arbitrary HTML attributes into rendered Markdown because the Markdown rendering pipeline rewrote quote characters in already-sanitized HTML without...

CVE-2026-77912 Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed HTML attribute injection via the Markdown rendering pipeline

A stored cross-site scripting XSS vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to inject arbitrary HTML attributes into rendered Markdown because the Markdown rendering pipeline rewrote quote characters in already-sanitized HTML without...