11199 matches found
EUVD-2026-75207
zhitan-ems 1.0.0 is vulnerable to Cross Site Scripting XSS via SVG file upload through the /equipmentFile/upload endpoint...
CVE-2026-87620
Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36...
CVE-2026-75307
zhitan-ems 1.0.0 is vulnerable to Cross Site Scripting XSS via SVG file upload through the /equipmentFile/upload endpoint...
lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href
A flaw was found in lxml, a library for processing XML and HTML in Python. The lxml.html.defs.linkattrs were missing xlink:href, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics SVG...
lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href
A flaw was found in lxml, a library for processing XML and HTML in Python. The lxml.html.defs.linkattrs were missing xlink:href, which could allow an attacker to bypass URL filtering mechanisms. This vulnerability enables URL bypass attacks in embedded content such as Scalable Vector Graphics SVG...
CVE-2026-22610
Angular SVG Vulnerability Scanner CVE-2026-22610 Purpose: Scan Angular projects for potential XSS vulnerabilities in SVG Usage Run the script from the project root: Scan current folder root@kitploit: node scan-angular-svg-vuln-final.js Scan a specific folder root@kitploit: node...
CVE-2025-56515
CVE-2025-56515 Cross-Site Scripting XSS Vulnerability in Fiora Chat Application CVE-2025-56515: Cross-Site Scripting XSS Vulnerability in Fiora Chat Application Vulnerability Overview CVE ID : CVE-2025-56515 Vulnerability Type : Cross-Site Scripting XSS Attack Type : Remote Impact : Code Executio...
CVE-2023-24278
CVE-2023-24278 - Reflected XSS Vulnerabilities in Squidex Overview CVE ID: CVE-2023-24278 Affected Products: Squidex versions prior to 7.4.0 Reported By: Ioannis Christodoulakos This repository provides information and an exploit for two Reflected Cross-Site Scripting XSS vulnerabilities discover...
CVE-2025-60880
CVE-2025-60880: Stored Cross-Site Scripting XSS in Bagisto Admin Panel An authenticated stored XSS vulnerability exists in the Bagisto 2.3.6 admin panel's product creation path, allowing an attacker to upload a crafted SVG file containing malicious JavaScript code. This vulnerability can be...
CVE-2024-22641
CVE-2024-22641 Tipo de Vulnerabilidad Denegación de Servicio por Expresión Regular ReDoS Producto y Versión Afectados TCPDF root@kitploit: AddPage; $pdf-ImageSVG$file='poc.svg'; ?...
CVE-2026-45729
CVE-2026-45729 — ThorVG NULL Pointer Dereference via Malformed SVG Severity: CVSS 4.3 Medium — CWE-476 Advisory: GHSA-f863-8ghq-7h64 Fixed: ThorVG v1.0.5 Status: Patched / Disclosed Summary ThorVG's SVG parser dereferences a pointer that is never initialized when it encounters a truncated child...
CVE-2024-50803-Redaxo
CVE-2024-50803 Stored XSS in mediapool feature of Redaxo A stored cross-site scripting XSS vulnerability was found in Redaxo versions 5.18.0, allowing attackers with sufficient privileges to upload a malicious SVG file through the mediapool feature. Published a write-up :...
CVE-2024-34452
CVE-2024-34452 - Cross-Site Scripting XSS Vulnerability in CMSimpleXH Overview A cross-site scripting XSS vulnerability has been identified in CMSimpleXH version 1.7.6. This vulnerability allows authorized users to upload SVG files containing malicious JavaScript code. The issue stems from...
CVE-2026-87620
A flaw was found in Google Chrome. A remote attacker could exploit an observable discrepancy in the Scalable Vector Graphics SVG rendering engine by enticing a user to open a specially crafted HTML page. This could lead to the disclosure of sensitive information...
CVE-2026-87620
Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-87620
Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87620
CVE-2026-87620 affects the SVG rendering component in Google Chrome prior to 153.0.8010.36 . An observable discrepancy in SVG processing allowed a remote attacker to obtain sensitive information by serving a crafted HTML page. The vulnerability requires user interaction (visiting a malicious page...
CVE-2026-87620
Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
