CVE-2026-103667

Gitea's container registry served blob downloads with a Content-Type taken from the media type declared in pushed image manifests, without a Content-Disposition or restrictive content security policy. A user who can push container images can publish a blob containing HTML and JavaScript with a...

CVE-2026-105244

Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space was removed from the record instead of being escaped, so non-ASCII text and control characters such as tabs disappeared without notice. A party whos...

CVE-2026-103667

The Gitea container registry is vulnerable to a stored XSS flaw because it serves blob downloads using a Content-Type derived directly from the media type in pushed image manifests. Due to the lack of a Content-Disposition header or a restrictive content security policy, an attacker with push pri...

CVE-2026-103667 Gitea container registry stored XSS through blob media type

Gitea's container registry served blob downloads with a Content-Type taken from the media type declared in pushed image manifests, without a Content-Disposition or restrictive content security policy. A user who can push container images can publish a blob containing HTML and JavaScript with a...

Elasticsearch 9.4.8, 9.5.5 Security Update (ESA-2026-190)

Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion CWE-674 in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excessive Allocation CAPEC-130. Affected Versions: 9.x:...

CVE-2026-34212

CVE-2026-34212 O Docmost aceitou uma URL javascript: dentro de um nó de anexo, preservou-a durante o armazenamento e a renderização, e a transformou novamente em um âncora clicável na origem do Docmost. Introdução Identifiquei, divulguei responsavelmente e reproduzi um problema de XSS armazenado ...

LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values

Summary @langchain/redis did not properly escape values used to construct structured RediSearch TAG and TEXT filters. An application that passes attacker-controlled values into these filters could allow the attacker to alter the resulting search query. Affected versions @langchain/redis versions...

CVE-2026-105799

LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacker-controlled values in structured RediSearch TAG filters and structured RediSearch TEXT filters, allowing injected RediSearch syntax to alter or broaden the generated search...

postgresql-cve-2026-14662

Rastreando o CVE-2026-14662 — Vulnerabilidade de escrita fora dos limites na busca de texto completo do PostgreSQL Este é um registro de como investiguei o CVE-2026-14662, encontrado nos tipos de dados de busca de texto completo do PostgreSQL tsvector / tsquery, executando simultaneamente as...

CVE-2026-105799 LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values

LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacker-controlled values in structured RediSearch TAG filters and structured RediSearch TEXT filters, allowing injected RediSearch syntax to alter or broaden the generated search...

EUVD-2026-93431

LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacker-controlled values in structured RediSearch TAG filters and structured RediSearch TEXT filters, allowing injected RediSearch syntax to alter or broaden the generated search...

TNC-Defense

TNC-Defense O TNC-Defense fornece código de pesquisa para detectar e desintoxicar backdoors em modelos de difusão texto-imagem. O repositório atualmente inclui pipelines de detecção para Stable Diffusion v1.4, Stable Diffusion v1.5, Stable Diffusion XL, e Stable Diffusion 3 Medium, juntamente com...

CVE-2026-46490-samlify-SAML-Attribute-Injection

CVE-2026-46490 — samlify SAML AttributeValue XML इंजेक्शन → विशेषाधिकार वृद्धि samlifyValue — बिना एस्केप किए डाला जाता है, इसलिए एक सामान्य उपयोगकर्ता अपने स्वयं के, IdP-हस्ताक्षरित SAML प्रमाणपत्र में अतिरिक्त एलिमेंट जैसे role=admin इंजेक्ट कर सकता है। चूँकि इंजेक्शन हस्ताक्षर करने से पहले होत...

CVE-2026-5076

CVE-2026-5076 - Vulnerabilidade de Redefinição de Senha do ARMember Informações da Vulnerabilidade Item| Detalhe ---|--- ID CVE| CVE-2026-5076 Plugin| ARMember – Membership Plugin & Content Restriction Versão Afetada| Premium = 7.3.1 Versão Corrigida| 7.3.2 Pontuação CVSS| 9.8 Crítico CWE| CWE-64...

golang-x-text

Go Text Este repositório contém pacotes Go complementares para processamento de texto, muitos envolvendo Unicode. Versionamento do CLDR É importante que a versão do Unicode usada em x/text corresponda àquela usada pelo seu compilador Go. O repositório x/text suporta múltiplas versões do Unicode e...

[SECURITY] Fedora 45 Update: ocaml-uuseg-18.0.0-2.fc45

Uuseg is an OCaml library for segmenting Unicode text. It implements the locale-independent Unicode text segmentation algorithms http://www.unicode.org/reports/tr29/ to detect grapheme cluster, word and sentence boundaries and the Unicode line breaking algorithm http://www.unicode.org/reports/tr1...

ColonelClustered

Colonel Clustered - Clustering de Similaridade de Respostas v1.0.1 Uma extensão do Burp Suite para agrupar respostas HTTP e encontrar outliers. Introdução Este é um plugin que venho pensando em construir há muitos anos, simplesmente porque fico moderadamente incomodado com a forma como analisamos...

PT-2026-106756

Name of the Vulnerable Software and Affected Versions @langchain/redis versions prior to 1.1.1 Description @langchain/redis fails to escape attacker-controlled values used in structured RediSearch TAG and TEXT filters. This allows the injection of RediSearch syntax to alter or broaden the generat...

DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes

Environment - dompurify 3.4.15 current npm release; reproduced independently on jsdom 30.0.1 and 29.1.1 Node.js 20.x / 26.x - Config: DOMPurify.sanitizenode, INPLACE: true on a Node input; SAFEFORXML at its default true Summary The 3.4.9 fix for the INPLACE detached-root class added two protectio...

GHSA-6688-9RHM-GJV2 DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes

Environment - dompurify 3.4.15 current npm release; reproduced independently on jsdom 30.0.1 and 29.1.1 Node.js 20.x / 26.x - Config: DOMPurify.sanitizenode, INPLACE: true on a Node input; SAFEFORXML at its default true Summary The 3.4.9 fix for the INPLACE detached-root class added two protectio...