1221 matches found
PT-2026-71684
Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows authenticated users to execute arbitrary JavaScript in the application origin via a Markdown link whose URL contains a double quote, which closes the anchor's href attribute because the renderer's sanitization...
CVE-2026-73224
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user downloads a crafted folder and invokes Properties and Calculate Size because calcLocal in...
Intel® Trust Domain Extensions Data Center Attestation Primitives (Intel® TDX DCAP) Advisory
Summary: A potential security vulnerability in the Quote Verification Library in Intel® Trust Domain Extensions Data Center Attestation Primitives Intel® TDX DCAP may result in denial of service by returning insufficient detail for customer platform security verification. Intel is releasing...
Intel® Data Center Attestation Primitives (Intel® DCAP) Advisory
Summary: A potential security vulnerability in the Quote Verification Library QVL in Intel® DCAP may result in integrity failure in measurement and information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20702...
EUVD-2026-53919
A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the aprxmlquoteelem function. Users are recommended to upgrade to version 1.6.4, which fixes this issue...
CVE-2026-71312 rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, and quoteOrEscapeShellPath escapes only ASCII apostrophe even though...
CLSA-2026-1784683086 TuxCare security update for shell-quote (3 CVEs)
TuxCare rebuilt shell-quote to address 3 CVEs. Fixed in 1.7.3-tuxcare.1...
CLSA-2026-1773879463 TuxCare security update for shell-quote (1 CVE)
TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.7.2-tuxcare.1...
CLSA-2026-1773274563 TuxCare security update for shell-quote (2 CVEs)
TuxCare rebuilt shell-quote to address 2 CVEs. Fixed in 1.4.3-tuxcare.1...
The vulnerability of the quote() function in the shell-quote npm package, which allows a hacker to execute arbitrary code.
The vulnerability of the quote function in the shell-quote npm package is related to the lack of data cleansing measures at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2026-65321
PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format, which routes DELETE and CTAS statements to the escapehive function that backslash-escapes single...
CVE-2026-65321 PyAthena SQL Injection via DefaultParameterFormatter DELETE/CTAS
PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format, which routes DELETE and CTAS statements to the escapehive function that backslash-escapes single...
EUVD-2026-52004
PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format, which routes DELETE and CTAS statements to the escapehive function that backslash-escapes single...
CVE-2026-65321
CVE-2026-65321 affects PyAthena prior to 3.35.4. The vulnerability stems from improper quote escaping in DefaultParameterFormatter.format(), where DELETE and CTAS flows go through _escape_hive and backslash-escape single quotes instead of doubling them. Because Athena and Trino do not treat backs...
CVE-2026-65321 PyAthena SQL Injection via DefaultParameterFormatter DELETE/CTAS
PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format, which routes DELETE and CTAS statements to the escapehive function that backslash-escapes single...
CVE-2026-54658
Hypequery is a TypeScript semantic layer for ClickHouse. Prior to 2.5.1, escapeValue in packages/clickhouse/src/core/utils.ts did not escape backslashes before single quotes during parameter substitution, allowing attacker controlled query parameters with a trailing backslash to escape the closin...
SUSE-SU-2026:3327-1 Security update for yq
This update for yq fixes the following issues: Update to v4.53.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1267199. - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of...
OPENSUSE-SU-2026:21448-1 Security update for agama-web-ui
This update for agama-web-ui fixes the following issues: - CVE-2025-7783: form-data: unsafe Math.random function is used to select a boundary value for multipart form-encoded data bsc1246822. - CVE-2026-12143: form-data: CRLF injection via unescaped multipart field names and filenames bsc1272310....
NPM: shell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407)
NPM: shell-quote: Quadratic-complexity Denial of Service in parse CWE-407 vulnerability discovered by ? in WordPress Npm shell-quote versions = 1.8.4...