PDF writing buffer overflow Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 is related to writing outside the buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PDF writing buffer overflow Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat, Adobe Acrobat Reader, and Adobe Acrobat Reader 2024 is related to writing outside the buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2026-98896

Name of the Vulnerable Software and Affected Versions Readwise Reader for Android versions prior to 8.7.3 Description Stored cross-site scripting XSS occurs due to missing HTML sanitization when processing imported document metadata. Specifically, attacker-controlled fields such as doc.author and...

PT-2026-98897

🚨 CVE-2026-18312 Readwise Reader for Android constructs URLs in its WebView using attacker-controlled metadata without proper encoding or escaping. The application interpolates untrusted values directly into URL strings and inserts them into the DOM via innerHTML. Because the interpolation occurs...

CVE-2026-18320: Improper Neutralization of Input During Web Page Generation

Readwise Reader for Android uses a sanitize-html configuration that permits all attributes on SVG and PATH elements due to a wildcard attribute rule. This configuration fails to remove script-capable attributes such as event handlers e.g., 'onload', 'onerror'. An attacker could supply a document...

CVE-2026-18312: Improper Neutralization of Input During Web Page Generation

Readwise Reader for Android constructs URLs in its WebView using attacker-controlled metadata without proper encoding or escaping. The application interpolates untrusted values directly into URL strings and inserts them into the DOM via innerHTML. Because the interpolation occurs without HTML or...

CVE-2026-18311: Improper Neutralization of Input During Web Page Generation

Readwise Reader for Android contains a cross-site scripting vulnerability due to missing HTML sanitization in its processing of imported document metadata. Attacker-controlled fields such as the author meta tag are inserted into a WebView via innerHTML, enabling stored XSS that executes on synced...

PT-2026-98898

🚨 CVE-2026-18320 Readwise Reader for Android uses a sanitize-html configuration that permits all attributes on SVG and PATH elements due to a wildcard attribute rule. This configuration fails to remove script-capable attributes such as event handlers e.g., 'onload', 'onerror'. An attacker could...

Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities

Overview Three cross-site scripting XSS vulnerabilities identified in Readwise Reader for Android version 8.7.2 are disclosed. An attacker with the ability to craft malicious documents or metadata can exploit these vulnerabilities by supplying poisoned content that bypasses sanitization. Successf...

GHSA-87MG-5GRR-RHWH Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module

Summary The Feed Reader front-end module passes RSS feed URLs from its configuration directly to $this-feedIo-read$url without any scheme validation or private-IP blocklist. A backend user with module-edit permissions can configure an arbitrary URL pointing to internal network services,...

Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module

Summary The Feed Reader front-end module passes RSS feed URLs from its configuration directly to $this-feedIo-read$url without any scheme validation or private-IP blocklist. A backend user with module-edit permissions can configure an arbitrary URL pointing to internal network services,...

EUVD-2026-51596

Contao: Server-Side Request Forgery SSRF via Unvalidated RSS Feed URL in Feed Reader Module...

CVE-2026-77420

A flaw was found in JLine, a Java library for handling console input. An attacker who can control application or user configuration can supply a specially crafted regular expression to the HISTORYIGNORE configuration variable. This malicious input can cause excessive CPU consumption when commands...

africa.shuwari.sbt:sbt-js_2.12_1.0 (>=0.14.1, <=0.16.1), africa.shuwari.sbt:sbt-netbeans_2.12_1.0 (>=0.1.0, <=0.1.1) +4719 more potentially affected by CVE-2026-77420 via org.jline:jline-reader (>=3.2.0, <=3.30.14)

org.jline:jline-reader MAVEN version =3.2.0, =0.14.1, =0.1.0, =0.9.6, =0.15.3, =0.12.0, =0.9.6, =0.15.3, =0.9.6, =0.9.6, =0.15.3, =0.9.6, =0.15.3, =0.14.1, =0.9.6, =0.14.3 and more Source cves: CVE-2026-77420 Source advisory: OSV:GHSA-5Q95-HRPC-M3W3...

africa.shuwari.sbt:sbt-js_2.12_1.0 (>=0.14.1, <=0.16.1), africa.shuwari.sbt:sbt-netbeans_2.12_1.0 (>=0.1.0, <=0.1.1) +4719 more potentially affected by CVE-2026-77420 via org.jline:jline-reader (>=3.2.0, <=3.30.14)

org.jline:jline-reader MAVEN version =3.2.0, =0.14.1, =0.1.0, =0.9.6, =0.15.3, =0.12.0, =0.9.6, =0.15.3, =0.9.6, =0.9.6, =0.15.3, =0.9.6, =0.15.3, =0.14.1, =0.9.6, =0.14.3 and more Source cves: CVE-2026-77420 Source advisory: GHSA-5Q95-HRPC-M3W3...

ch.epfl.lara:scala3-language-server_3 (>=3.9.0-rc1-bin-20260516-64de706-nightly, <=3.10.0-rc1-bin-20260720-513d792-nightly), ch.epfl.lara:scala3-repl_3 (>=3.9.0-rc1-bin-20260516-64de706-nightly, <=3.10.0-rc1-bin-20260720-513d792-nightly) +46 more potentially affected by CVE-2026-77420 via org.jline:jline-reader (>=4.0.0, <=4.3.0)

org.jline:jline-reader MAVEN version =4.0.0, =3.9.0-rc1-bin-20260516-64de706-nightly, =3.9.0-rc1-bin-20260516-64de706-nightly, =3.9.0-rc1-bin-20260516-64de706-nightly, =26.4.2, =26.4.2, =9.4.3, =9.4.3, =9.4.3, =3.9.0-rc5-p11, =3.9.0-rc5-p11, =2.54.0, =2.54.0, =2.55.0 and more Source cves:...

ch.epfl.lara:scala3-language-server_3 (>=3.9.0-rc1-bin-20260516-64de706-nightly, <=3.10.0-rc1-bin-20260720-513d792-nightly), ch.epfl.lara:scala3-repl_3 (>=3.9.0-rc1-bin-20260516-64de706-nightly, <=3.10.0-rc1-bin-20260720-513d792-nightly) +46 more potentially affected by CVE-2026-77420 via org.jline:jline-reader (>=4.0.0, <=4.3.0)

org.jline:jline-reader MAVEN version =4.0.0, =3.9.0-rc1-bin-20260516-64de706-nightly, =3.9.0-rc1-bin-20260516-64de706-nightly, =3.9.0-rc1-bin-20260516-64de706-nightly, =26.4.2, =26.4.2, =9.4.3, =9.4.3, =9.4.3, =3.9.0-rc5-p11, =3.9.0-rc5-p11, =2.54.0, =2.54.0, =2.55.0 and more Source cves:...

africa.shuwari.sbt:sbt-js_2.12_1.0 (>=0.14.1, <=0.16.1), africa.shuwari.sbt:sbt-netbeans_2.12_1.0 (>=0.1.0, <=0.1.1) +4719 more potentially affected by CVE-2026-77420 via org.jline:jline-reader (>=3.2.0, <=3.30.14)

org.jline:jline-reader MAVEN version =3.2.0, =0.14.1, =0.1.0, =0.9.6, =0.15.3, =0.12.0, =0.9.6, =0.15.3, =0.9.6, =0.9.6, =0.15.3, =0.9.6, =0.15.3, =0.14.1, =0.9.6, =0.14.3 and more Source cves: CVE-2026-77420 Source advisory: SNYK:JAVA-ORGJLINE-20079472...

ch.epfl.lara:scala3-language-server_3 (>=3.9.0-rc1-bin-20260516-64de706-nightly, <=3.10.0-rc1-bin-20260720-513d792-nightly), ch.epfl.lara:scala3-repl_3 (>=3.9.0-rc1-bin-20260516-64de706-nightly, <=3.10.0-rc1-bin-20260720-513d792-nightly) +46 more potentially affected by CVE-2026-77420 via org.jline:jline-reader (>=4.0.0, <=4.3.0)

org.jline:jline-reader MAVEN version =4.0.0, =3.9.0-rc1-bin-20260516-64de706-nightly, =3.9.0-rc1-bin-20260516-64de706-nightly, =3.9.0-rc1-bin-20260516-64de706-nightly, =26.4.2, =26.4.2, =9.4.3, =9.4.3, =9.4.3, =3.9.0-rc5-p11, =3.9.0-rc5-p11, =2.54.0, =2.54.0, =2.55.0 and more Source cves:...

JLine: ReDoS via `HISTORY_IGNORE` Configuration Variable

Summary The JLine3 HISTORYIGNORE variable is converted into a Java regular expression with only partial escaping. As a result, regex metacharacters other than and : are passed through to the regex engine. A crafted value such as a++b can cause catastrophic backtracking each time a command line is...