4577 matches found
CVE-2021-26539
Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name IDN which could allow an attacker to bypass hostname whitelist validation set by the "allowedIframeHostnames" option...
Design/Logic Flaw
Apostrophe Technologies sanitize-html before 2.3.2 does not properly validate the hostnames set by the "allowedIframeHostnames" option when the "allowIframeRelativeUrls" is set to true, which allows attackers to bypass hostname whitelist for iframe element, related using an src value that starts...
CVE-2021-26540
The CVE-2021-26540 issue affects Apostrophe Technologies sanitize-html prior to 2.3.2, where the hostnames set in allowedIframeHostnames could be bypassed when allowIframeRelativeUrls is true, enabling bypass of the hostname whitelist for iframe src values starting with /\example.com. Public disc...
CVE-2021-26540
Apostrophe Technologies sanitize-html before 2.3.2 does not properly validate the hostnames set by the "allowedIframeHostnames" option when the "allowIframeRelativeUrls" is set to true, which allows attackers to bypass hostname whitelist for iframe element, related using an src value that starts...
CVE-2021-26540
Apostrophe Technologies sanitize-html before 2.3.2 does not properly validate the hostnames set by the "allowedIframeHostnames" option when the "allowIframeRelativeUrls" is set to true, which allows attackers to bypass hostname whitelist for iframe element, related using an src value that starts...
CVE-2021-26539
CVE-2021-26539 affects Apostrophe Technologies sanitize-html prior to version 2.3.1. The vulnerability arises from improper handling of internationalized domain names (IDN), which can allow an attacker to bypass the hostname whitelist validated by the allowedIframeHostnames option. Impact is bypa...
CVE-2021-26539
Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name IDN which could allow an attacker to bypass hostname whitelist validation set by the "allowedIframeHostnames" option...
CVE-2021-26539
Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name IDN which could allow an attacker to bypass hostname whitelist validation set by the "allowedIframeHostnames" option...
CVE-2021-3186
creationtimestamp| type| source ---|---|--- 2021-02-08 05:22:54+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2584 2026-09-01 17:01:03+00:00| published-proof-of-concept| https://t.me/cissp/2232 2026-09-02 01:04:53+00:00| published-proof-of-concept| https://t.me/cissp/2...
CVE-2021-26539: Undefined Security Weakness
Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name IDN which could allow an attacker to bypass hostname whitelist validation set by the "allowedIframeHostnames" option...
Abea Apostrophe Technologies sanitize-html security vulnerability
Abea Apostrophe Technologies sanitize-html is a formatting removal tool organized by Abea USA. It provides simple HTML tag removal with a clear API. A security vulnerability exists in Apostrophe Technologies sanitize-html versions prior to 2.3.1, which stems from the inability to properly handle...
Weak password vulnerability in H3C ERG2-1350W router of Xinhua San Technologies Co.
The H3C ERG2-1350W is a router from Xinhua San Technologies Co. A weak password vulnerability exists in the H3C ERG2-1350W router from Xinhua San Technologies Ltd. that can be exploited by an attacker to obtain sensitive information...
Denial of Service Vulnerability in TL-ER6229GPE-AC of P&L Technologies Ltd.
The TL-ER6229GPE-AC is a gigabit router. A denial of service vulnerability exists in the P&L Technologies TL-ER6229GPE-AC, which can be exploited by an attacker to cause a denial of service by sending a carefully constructed packet...
Weak password vulnerability in H3C ER3100 of Xinhua San Technologies Co.
H3C ER3100 is a router from Hangzhou Huasan Communication Technology Co. Ltd. The H3C ER3100 suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...
Weak password vulnerability in H3C F1000-C8102 of Xinhua San Technologies Co.
The H3C F1000-C8102 is a firewall from Xinhua San Technologies Co. A weak password vulnerability exists in the H3C F1000-C8102 of Xinhua SanTechnology Limited, which can be exploited by an attacker to log in to the backend to obtain data or perform unauthorized operations...
CVE-2020-27869
creationtimestamp| type| source ---|---|--- 2021-01-25 11:02:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2565 2026-09-01 17:01:02+00:00| published-proof-of-concept| https://t.me/cissp/2202 2026-09-02 01:04:52+00:00| published-proof-of-concept| https://t.me/cissp/2...
File Uploading Vulnerability in Eki Technologies ERP System
Ltd. is a software company focusing on enterprise management, specializing in providing professional information management consulting, software development and online mall development and other information services. A file upload vulnerability exists in the ERP system of EqiTech, which can be...
Denial of Service Vulnerability in TL-ER6110G of P&L Technologies Ltd.
"TP-LINK" is a leading global supplier of network communication equipment. A denial of service vulnerability exists in the TL-ER6110G, which can be exploited by attackers to cause a denial of service...
Denial of Service Vulnerability in TL-ER5520G of P&L Technologies Ltd.
The TL-ER5520G is a gigabit router. A denial of service vulnerability exists in the P&L Technologies TL-ER5520G, which can be exploited by attackers to cause a denial of service...
Denial of Service Vulnerability in TL-ER7520G of P&L Technologies Ltd.
TL-ER7520G is a new generation of full gigabit enterprise router product. A denial-of-service vulnerability exists in the TL-ER7520G from P&L Technologies, which can be exploited by attackers to cause a denial of service...