fast-security-scanners

Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...

CLEANSTART-2026-QI80412 Actions which insert URLs into the content attribute of HTML meta tags are not escaped

CVE-2026-27142 affects multiple packages. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. See references for individual vulnerability details...

CLEANSTART-2026-MJ05158 Actions which insert URLs into the content attribute of HTML meta tags are not escaped

CVE-2026-27142 affects multiple packages. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. See references for individual vulnerability details...

CLEANSTART-2026-PD81814 Actions which insert URLs into the content attribute of HTML meta tags are not escaped

CVE-2026-27142 affects multiple packages. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. See references for individual vulnerability details...

CLEANSTART-2026-JM41318 Actions which insert URLs into the content attribute of HTML meta tags are not escaped

CVE-2026-27142 affects multiple packages. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. See references for individual vulnerability details...

CLEANSTART-2026-EY32574 Actions which insert URLs into the content attribute of HTML meta tags are not escaped

CVE-2026-27142 affects multiple packages. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. See references for individual vulnerability details...

CLEANSTART-2026-UV08915 Actions which insert URLs into the content attribute of HTML meta tags are not escaped

Security vulnerability affects the argo-cd package. Actions which insert URLs into the content attribute of HTML meta tags are not escaped...

PT-2026-118510

Name of the Vulnerable Software and Affected Versions sanitize-html versions prior to 2.18.0 Description A non-default configuration that allows meta tags along with their http-equiv and content attributes fails to properly sanitize the content value when http-equiv is set to refresh. This occurs...

CVE-2026-108583

zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because fetchembeddedmetadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zoteroaddbyurl, causing...

CVE-2026-108583 zotero-mcp 0.10.0 through 0.14.1 SSRF via zotero_add_by_url Tool

zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because fetchembeddedmetadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zoteroaddbyurl, causing...

CVE-2026-108583

zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because fetchembeddedmetadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zoteroaddbyurl, causing...

cspparse

cspparse Descrizione cspparse è uno strumento per valutare le Content Security Policies. Utilizza l'API di Google per recuperare gli header CSP e li restituisce in formato ReconJSON. Non solo controlla gli header tramite l'API di Google, ma analizza anche l'HTML del sito target per cercare...

PT-2026-109674

Name of the Vulnerable Software and Affected Versions zotero-mcp versions 0.10.0 through 0.14.1 Description A server-side request forgery SSRF issue exists where the fetch embedded metadata function fetches URLs without validating the destination. Attackers can use prompt injection to force the...

CLEANSTART-2026-QB50349 Actions which insert URLs into the content attribute of HTML meta tags are not escaped

CVE-2026-27142 affects multiple packages. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. See references for individual vulnerability details...

CLEANSTART-2026-MM79132 Actions which insert URLs into the content attribute of HTML meta tags are not escaped

Security vulnerability affects the temporal-server package. Actions which insert URLs into the content attribute of HTML meta tags are not escaped...

CLEANSTART-2026-NA44520 Actions which insert URLs into the content attribute of HTML meta tags are not escaped

Security vulnerability affects the cri-tools package. Actions which insert URLs into the content attribute of HTML meta tags are not escaped...

CLEANSTART-2026-TB40408 Actions which insert URLs into the content attribute of HTML meta tags are not escaped

CVE-2026-27142 affects multiple packages. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. See references for individual vulnerability details...

CLEANSTART-2026-GK03402 Actions which insert URLs into the content attribute of HTML meta tags are not escaped

Security vulnerability affects the buildkitd package. Actions which insert URLs into the content attribute of HTML meta tags are not escaped...

CVE-2026-89406

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to unauthorized disclosure of private gallery contents in versions up to, and including, 3.0.1. This is due to the ModulaMeta::addmetas function being hooked to wphead on every frontend request and looking up...

PT-2026-98388

Name of the Vulnerable Software and Affected Versions Modula Image Gallery – Photo Grid & Video Gallery versions prior to 3.0.2 Description Unauthenticated attackers can cause the unauthorized disclosure of private gallery contents. The issue occurs because the Modula Meta::add metas function is...