CVE-2026-57054 Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs

A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass web filtering and access downstream resources that should be unreachable. If an MX Series device is...

CVE-2026-57054

CVE-2026-57054 describes a Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series. The issue allows an unauthenticated, network-based attacker to bypass web filtering and access downstream resources that should be unreacha...

libwebp: Heap buffer overflow in WebP Codec

A heap-based buffer flaw was found in the way libwebp, a library used to process "WebP" image format data, processes certain specially formatted WebP images. An attacker could use this flaw to crash or execute remotely arbitrary code in an application such as a web browser compiled with this...

CVE-2022-24974

Links may not be rewritten according to policy in some specially formatted emails...

Laurent Rineau CGAL Code Execution Vulnerability (CNVD-2022-32783)

Laurent Rineau CGAL is an open source application from Laurent Rineau. Providing access to geometric algorithms in the form of C libraries, Laurent Rineau CGAL suffers from a security vulnerability that could be exploited by an attacker to provide specially formatted malformed files to cause...

Dovecot Authentication Malfunction

The vulnerability of the Dovecot mail server is related to incorrect validation of input data. Exploiting this vulnerability can allow a remote attacker to cause malfunctions in the authentication service by sending a specially formatted NTLM request...

PT-2019-3890

Name of the Vulnerable Software and Affected Versions Eclipse Jetty versions 9.2.26 and older Eclipse Jetty versions 9.3.25 and older Eclipse Jetty versions 9.4.15 and older Description The server is vulnerable to XSS conditions if a remote client uses a specially formatted URL against the...

U.S. Dept Of Defense: Reflected XSS on an Army website

A U.S. Army website was vulnerable to a cross-site scripting attack which may be used to trick a web user into executing a malicious script, potentially revealing a user's browser cookies or modify web content. juliocesar was able to demonstrate this vulnerability by crafting a specially formatte...

CVE-2016-7091

It was discovered that the default sudo configuration preserved the value of INPUTRC from the user's environment, which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw to read content from specially formatted files...

NewAtlanta ServletExec/ISAPI 4.1 Path Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4793/info ServletExec/ISAPI is a plug-in Java Servlet/JSP engine for Microsoft IIS. It runs with IIS on Microsoft Windows NT/2000/XP systems. ServletExec/ISAPI discloses the absolute path to the webroot directory when sen...

Sielco Sistemi Winlog Buffer Overflow

Exploit for windows platform in category remote exploits $Id: winlogruntime.rb 13000 2011-06-21 22:42:53Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...