3842 matches found
CVE-2018-7600
CVE-2018-7600 / SA-CORE-2018-002 的概念验证 codebeat badge 在 Drupal 7.58 之前版本、8.x 版本 8.3.9 之前、8.4.x 版本 8.4.6 之前以及 8.5.x 版本 8.5.1 之前，远程攻击者可以通过影响多个子系统（使用默认或常用模块配置）的问题执行任意代码。 工作原理 1. 向 drupalajax 封装发送数据包以注册用户。允许用户使用 exec 标记并运行 bash。此 PoC 将用户名和 ID 发送至 abcde.txt。 root@kitploit: echo Name: $id -un UID: $id ...
CVE-2026-92814
changedetection.io through 0.60.6 fails to escape the scraped page title in HTML notifications, allowing arbitrary markup injection. Attackers can place malicious markup in monitored page titles that reaches notification channels like email and Telegram as live content when the watchtitle token i...
EUVD-2026-81072
changedetection.io through 0.60.6 fails to escape the scraped page title in HTML notifications, allowing arbitrary markup injection. Attackers can place malicious markup in monitored page titles that reaches notification channels like email and Telegram as live content when the watchtitle token i...
CVE-2026-92814
changedetection.io through version 0.60.6 contains a stored markup injection vulnerability in its watch_title notification token. The scraped page title is not HTML-escaped before being rendered in notification templates (see notification/handler.py), allowing an attacker to embed arbitrary marku...
CVE-2026-92814 changedetection.io through 0.60.6 Cross-Site Scripting via watch_title
changedetection.io through 0.60.6 fails to escape the scraped page title in HTML notifications, allowing arbitrary markup injection. Attackers can place malicious markup in monitored page titles that reaches notification channels like email and Telegram as live content when the watchtitle token i...
CVE-2026-78415
IBM Sterling Secure Proxy versions 6.2.0.0 through 6.2.1.2 are affected by a vulnerability where improper neutralization of user-supplied HTML markup (CWE-79) allows a remote authenticated attacker to perform UI spoofing and phishing attacks . The attack requires low privileges and low complexity...
CVE-2026-78415 IBM Sterling Secure Proxy is vulnerable to multiple issues
IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and phishing attacks due to improper neutralization of user-supplied HTML markup...
Astra Linux – Vulnerability in Chromium
Before version 148.0.7778.216, using free in Google Chrome’s views allowed a remote attacker who convinced a user to perform certain UI gestures to execute arbitrary code through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerabilities in Python 2.7, Python 3.11, Python 3.7
Python-Markdown version 3.8 contains a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing. Since Python-Markdown does not catch this exception, any application that processes Markdown controlled by...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in the Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in netcdf
A issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxmldecode performs incorrect memory handling during the parsing of crafted XML files, resulting in a heap out-of-bounds read...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in the GPU component of Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severit...
Astra Linux – Vulnerability in Chromium
Integer overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2025-210888
The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it, allowing users with a role as high as administrator to store JavaScript that runs in the session of any visitor to the site...
Linux Distros Unpatched Vulnerability : CVE-2026-88058
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, a...
CVE-2026-88859
CVE-2026-88859 is a flaw in the Evolution email client where a remote attacker can send a crafted HTML email containing a spoofed vCard control . When the victim clicks it, Evolution's trusted JavaScript handler incorrectly assigns an attacker-controlled JavaScript URL to an iframe's source , res...
EUVD-2026-69219
xmldom: DocType name Injection Bypasses requireWellFormed...
GHSA-27P8-2357-5QQV xmldom: DocType `name` Injection Bypasses requireWellFormed
Summary The @xmldom/xmldom serializer emits DocumentType.name verbatim into the declaration with no well-formedness guard. GHSA-f6ww-3ggp-fr8h CVE-2026-41674 hardened the serializer's requireWellFormed path for a DocumentType's sibling fields — publicId, systemId, and internalSubset — but it did...
xmldom: DocType `name` Injection Bypasses requireWellFormed
Summary The @xmldom/xmldom serializer emits DocumentType.name verbatim into the declaration with no well-formedness guard. GHSA-f6ww-3ggp-fr8h CVE-2026-41674 hardened the serializer's requireWellFormed path for a DocumentType's sibling fields — publicId, systemId, and internalSubset — but it did...