CVE-2026-48590 Element and Attribute Names Injected Verbatim into XML Output in xml_builder

XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,...

CVE-2026-48590

CVE-2026-48590 is an XML Injection vulnerability in the Elixir library xml_builder (by joshnuss), affecting versions 0.0.1 through before 2.4.1 . The root cause is that element names, attribute names, and doctype identifiers are interpolated verbatim into the serialized XML output without escapin...

EEF-CVE-2026-48590 Element and Attribute Names Injected Verbatim into XML Output in xml_builder

Summary XML Injection vulnerability in joshnuss xml\builder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xml\builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/...

CVE-2026-48590 Element and Attribute Names Injected Verbatim into XML Output in xml_builder

XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,...

EUVD-2026-63879

XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,...

CVE-2026-48590 Element and Attribute Names Injected Verbatim into XML Output in xml_builder

XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,...

LavaDome

LavaDome 🌋️ Un nuovo strumentoLavaMoat per nodi DOM con I ncapsulamento sicuro ⚠️ SPERIMENTALE WIP - USALO A TUO RISCHIO scopri di più Demo Prova a violareLavaDome - visita l'app demo, apri la console, e fai tutto ciò che è in tuo potere per rubare il segreto dall'interno dell'istanza LavaDome...

Chrome_Issue992914

Chrome Issue 992914 — 32-bit Port Windows 다시 올리는 이유 / R...

invoker

Invoker Penetration testing utility and antivirus assessment tool. Built with Visual Studio Community 2022 v17.5.4 64-bit and tested on Windows 10 Enterprise OS 64-bit. Made for educational purposes. I hope it will help! This repository started to have known signatures and I don't have time to...

invoker

Invoker Penetrationstest-Dienstprogramm und Antiviren-Bewertungstool. Erstellt mit Visual Studio Community 2022 v17.5.4 64-Bit und getestet unter Windows 10 Enterprise OS 64-Bit. Für Bildungszwecke erstellt. Ich hoffe, es wird helfen! Dieses Repository hat bekannte Signaturen und ich habe keine...

Exploit for Expression Language Injection in Mathjs

CVE-2026-40897 Remote Code Execution in Math.js Expression Par...

Exploit for CVE-2026-60004

CVE-2026-60004 Gitea diffpatch RCE ★ CVE-2026-60004 Gitea di...

Digital-Privacy

Inglese | 简体中文 Esistono due tipi di crittografia in questo mondo: quella che fermerà tua sorella minore dal leggere i tuoi file, e quella che fermerà i grandi governi dal leggere i tuoi file. Bruce Schneier《Applied Cryptography》 Contenuto : Protezione delle informazioni, risorse OSINT Open-source...

Allocation of Resources Without Limits or Throttling

Overview org.jsoup:jsoup is a Java library for working with real-world HTML. It provides a very convenient API for extracting and manipulating data, using the best of DOM, CSS, and jquery-like methods. jsoup implements the WHATWG HTML5 specification, and parses HTML to the same DOM as modern...

SUSE CVE-2026-72217

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdrbuftobvec stores before writing xdrbuftobvec writes a biovec into the caller's array before testing whether that slot is in range, and the head branch performs the store with no check at all. When the...

EUVD-2026-63696

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...

EUVD-2026-63697

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...

PT-2026-79353

A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 documents. The STIX import code used sys.exit to handle several parsing and loading failures. Because SystemExit inherits from BaseException rather than Exception, these failures...

PT-2026-79346

Inappropriate Encoding for Output Context vulnerability in joshnuss xml builder XmlBuilder module allows Content Spoofing, Cross-site Scripting. This vulnerability is associated with program files lib/xml builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2,...

Fedora 44 : wordpress (2026-dc0ff85b8b)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dc0ff85b8b advisory. WordPress 6.9.7 Release Security update included in this release - Authenticated Author+ remote code execution via malicious file upload on sites th...