101520 matches found
CVE-2026-45741
Gotenberg (a Docker-powered stateless PDF API) versions 8.32.0 and earlier contain an SSRF deny-list bypass in the IsPublicIP function (pkg/gotenberg/outbound.go). The function fails to reject IPv6 transition prefixes (6to4 2002::/16, NAT64 64:ff9b::/96 and 64:ff9b:1::/48, deprecated site-local f...
CVE-2026-76210
phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...
MINI-4HCJ-W92V-VHR2
Bulletin has no description...
CVE-2026-76210
phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...
CVE-2026-76210 phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export
phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...
CVE-2026-76210
phpMyFAQ before 4.1.6 (some sources cite 4.1.7) contains an inadequate HTML sanitization flaw in FAQ answers before PDF generation via TCPDF . An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory (e.g...
CVE-2026-76210 phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export
phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...
MINI-HM6M-52WH-8H85
Bulletin has no description...
MINI-JM6M-52VR-R678
Bulletin has no description...
MINI-2R8R-F5GJ-W6XR
Bulletin has no description...
MINI-QPF2-JVR3-H86X
Bulletin has no description...
MINI-CPF9-WVHM-FFQR
Bulletin has no description...
MINI-23PW-QW2M-C849
Bulletin has no description...
MINI-CR7P-M8WJ-W8MF
Bulletin has no description...
MINI-43R8-2JV9-2MM3
Bulletin has no description...
MINI-XC55-QFXG-J6JH
Bulletin has no description...
MINI-J6X3-QMP9-W7JH
Bulletin has no description...
MINI-28VM-VX4P-HGWW
Bulletin has no description...