CVE-2026-101091 SiYuan before v3.8.4 SQL Injection via Block Query Embed

SiYuan versions before v3.8.4 fail to properly validate SQL statements in block query embed blocks executed against siyuan.db. Attackers can craft malicious .sy documents with non-read-only SQL statements that execute automatically during background indexing, rendering, or export operations witho...

CVE-2026-101091

SiYuan versions before v3.8.4 are vulnerable to a SQL injection flaw because they fail to properly validate SQL statements in block query embed blocks executed against siyuan.db . An attacker can craft malicious .sy documents containing non-read-only SQL statements. These statements execute autom...

Infinite loop

Overview @angular/platform-server is an Angular - library for using Angular in Node.js Affected versions of this package are vulnerable to Infinite loop via the afterdoctypenamestate handler in Domino's HTML parser lib/HTMLParser.js, used by @angular/platform-server for server-side rendering. Whe...

EUVD-2026-75681

Angular SSR: XSS via Unescaped Processing Instruction Nodes in Fallback Raw-Content Elements...

Angular SSR: XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements

Summary An XSS vulnerability exists in @angular/platform-server during server-side rendering SSR HTML serialization of ProcessingInstruction DOM nodes , nodeType === 7 when nested inside fallback raw-content elements , , , . While processing instruction data escaped to , it did not check for or...

wiki-xss-test

Test Security Repo alert'...

CVE-2026-98106

A flaw was found in the Linux kernel's Direct Rendering Manager DRM pagemap component. A race condition during memory migration allows a local user to cause a Denial of Service DoS. When device-private memory is migrated to system memory during a page fault, a timing window permits an eviction...

Render Before Reading: Visual Rendering As a Prompt Injection Defense

Large language models are vulnerable to prompt injection attacks, where third-party adversarial content can hijack the model's behavior. In this paper, we study the role played by the adversarial data's input modality, and identify a systematic asymmetry: multimodal LLMs are more likely to follow...

ROS-20260928-73-0116

The vulnerability of the drmgemresetshadowplane function in the drivers/gpu/drm/drmgematomichelper.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a...

CVE-2026-29053

CVE-2026-29053 - Ghost CMS 受影响： Ghost 0.7.2 至 6.19.0 已修复： Ghost 6.19.1 CWE： CWE-74 — 下游组件使用的输出中特殊元素的不当中和 Ghost 的公告将此问题描述为通过恶意主题实现任意代码执行。 漏洞是什么？ Ghost 主题使用 Handlebars 模板 （.hbs）。 特制的模板可以滥用 Ghost 处理 Handlebars 表达式的方式，访问本不应从普通主题模板触及的 JavaScript 功能。 利用的关键部分是模板表达式： get "posts" filter="tags:page?...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview org.apache.qpid:qpid-broker-core is a package that manages Broker core functionality and initial configuration. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via improper handling of compressed data in the shared GZIP...

hono: hono/jsx: Cross-Site Scripting via Unescaped Strings

A flaw was found in hono/jsx. This vulnerability occurs because the software fails to properly escape plain strings when they are rendered in certain contexts during server-side rendering. A remote attacker can exploit this by providing specially crafted input, leading to Cross-Site Scripting XSS...

CVE-2026-97723

madpsy ka9qubersdr before 0.1.58 has a stored cross-site scripting XSS vulnerability in the chat message rendering functionality. User-controlled URLs in chat messages were insufficiently neutralized before being converted into HTML links. Quotation characters could break out of the generated hre...

EUVD-2026-86499

madpsy ka9qubersdr before 0.1.58 has a stored cross-site scripting XSS vulnerability in the chat message rendering functionality. User-controlled URLs in chat messages were insufficiently neutralized before being converted into HTML links. Quotation characters could break out of the generated hre...

CVE-2026-97723

madpsy ka9qubersdr before 0.1.58 has a stored cross-site scripting XSS vulnerability in the chat message rendering functionality. User-controlled URLs in chat messages were insufficiently neutralized before being converted into HTML links. Quotation characters could break out of the generated hre...

CVE-2026-97723

madpsy ka9qubersdr before 0.1.58 has a stored cross-site scripting XSS vulnerability in the chat message rendering functionality. User-controlled URLs in chat messages were insufficiently neutralized before being converted into HTML links. Quotation characters could break out of the generated hre...

CVE-2026-97723

madpsy ka9qubersdr before 0.1.58 has a stored cross-site scripting XSS vulnerability in the chat message rendering functionality. User-controlled URLs in chat messages were insufficiently neutralized before being converted into HTML links. Quotation characters could break out of the generated hre...

CVE-2026-97723

The madpsy ka9q_ubersdr software, in versions before 0.1.58 , is susceptible to a stored cross-site scripting (XSS) vulnerability within the chat message rendering functionality. The root cause is the insufficient neutralization of user-controlled URLs before they are converted into HTML links. S...

CVE-2026-97723: Improper Neutralization of Input During Web Page Generation

madpsy ka9qubersdr before 0.1.58 has a stored cross-site scripting XSS vulnerability in the chat message rendering functionality. User-controlled URLs in chat messages were insufficiently neutralized before being converted into HTML links. Quotation characters could break out of the generated hre...

PT-2026-98343

Name of the Vulnerable Software and Affected Versions madpsy ka9q ubersdr versions prior to 0.1.58 Description A stored cross-site scripting XSS issue exists in the chat message rendering functionality. User-controlled URLs in chat messages are insufficiently neutralized before being converted in...