📄 Adobe DNG SDK 1.7.1 2410 Integer Overflow

A potential security issue may arise when processing DNG Digital Negative files that embed JPEG XL JXL compressed image streams if image dimensions are not properly validated before memory allocation. In this scenario, specially crafted width and height values are embedded inside the JPEG XL stre...

On the Effectiveness of Mutational Grammar Fuzzing

Posted by Ivan Fratric Mutational grammar fuzzing is a fuzzing technique in which the fuzzer uses a predefined grammar that describes the structure of the samples. When a sample gets mutated, the mutations happen in such a way that any resulting samples still adhere to the grammar rules, thus the...

GHSA-59G6-V3VG-F7WC CocoIndex Doris target connector didn't verify table name when constructing ALTER TABLE statements

Impact The Doris target connector didn't verify the configured table name before creating some SQL statements ALTER TABLE. So, in the application code, if the table name is provided by an untrusted upstream, it expose vulnerability to SQL injection when target schema change. Patches Yes, it's fix...

PT-2026-22701

Name of the Vulnerable Software and Affected Versions lxml html clean versions prior to 0.4.4 Description The software does not properly handle the tag during HTML cleaning. Specifically, the tag is not removed even when page structure=True, which removes html, head, and title tags. This allows a...

The vulnerability of the Active! mail client is related to the lack of measures taken to protect the website structure, allowing attackers to carry out XSS attacks.

The vulnerability of the mail client Active! is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Phishing the Phishers with SpecularNet: Hierarchical Graph Autoencoding for Reference-Free Web Phishing Detection

Phishing remains the most pervasive threat to the Web, enabling large-scale credential theft and financial fraud through deceptive webpages. While recent reference-based and generative-AI-driven phishing detectors achieve strong accuracy, their reliance on external knowledge bases, cloud services...

The vulnerability of the AI-based training platform OpenSift, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the OpenSift AI training automation platform relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the n8n automation platform, which stems from the lack of measures taken to protect the website structure, allows a hacker to intercept the session and gain access to the user account.

The vulnerability of the n8n automation platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to intercept sessions and gain control of the user account remotely...

The vulnerability of the SmarterTools SmarterMail mail server lies in the lack of protective measures for the website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the SmarterTools SmarterMail mail server is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using MAPI requests...

The vulnerability of the n8n automation platform, which stems from the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of the n8n automation platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, by bypassing the built-in CSP sandbox mechanism...

The vulnerability of the LinkAce archiver and distribution tool, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute arbitrary code.

The vulnerability of the LinkAce tool for archiving and distributing web links is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

ROS-20260224-73-0022

A vulnerability in the Moodle virtual learning environment is related to the failure to take measures to protect the structure of a web page. Exploitation of the vulnerability could allow a remote attacker to conduct a cross-site scripting XSS attack...

ROS-20260224-73-0018

Vulnerability in moodle due to failure to take measures to protect web page structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

ROS-20260224-73-0021

Vulnerability in moodle due to failure to take measures to protect web page structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

The vulnerability of the microprogrammed software of the Aitemi M300 wireless signal amplifiers (MT02) is related to the lack of measures taken to neutralize special elements used in the operating system’s command structure. This allows a hacker to execute arbitrary code.

The vulnerability of the microprogrammed software of Aitemi M300 wireless signal amplifiers is related to the lack of measures taken to neutralize special elements used in the operating system’s command structure. Exploiting this vulnerability could allow a remote attacker to execute arbitrary co...

Structure AG Libde265 安全漏洞

Structure AG Libde265 is a h.265 video codec developed by the German company Structure AG. There is a security vulnerability in Structure AG Libde265, which stems from a segmentation violation in the decoder context::computeframedroptable component...

CVE-2026-27211: External Control of File Name or Path

Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. Versions 34.0 through 50.0 arevulnerable to arbitrary host file exfiltration constrained by process privileges when using virtio-block devices backed by raw images. A malicious guest can overwrite its disk header with a crafted...

The vulnerability of the Explore Traces component of the Grafana monitoring and observation platform allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the Explore Traces component of the Grafana monitoring and observation platform relates to the lack of security measures for the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code...

The vulnerability of the data processing application Dell Unisphere for PowerMax and the virtualization software Dell Unisphere for PowerMax Virtual Appliance lies in the lack of security measures for the SQL query structure. This allows attackers to execute arbitrary commands.

The vulnerability of the data processing application Dell Unisphere for PowerMax and the virtualization software Dell Unisphere for PowerMax Virtual Appliance is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute...

The vulnerability of the Polarion ALM application lifecycle management software lies in the lack of protective measures for website structures, allowing attackers to carry out XSS attacks.

The vulnerability of the Polarion ALM application lifecycle management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...