Astra Linux – Vulnerability in Firefox and Thunderbird

When inserting text while in edit mode, some characters may cause out-of-bounds memory access, leading to potentially exploitable crashes. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

CVE-2026-38972

Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c. The application calls LoadLibraryL"MSFTEDIT.DLL" with a bare DLL name, which allows a local attacker to place a malicious MSFTEDIT.DLL in the application directory or...

PT-2026-39507

Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.6 Description Authenticated attackers can perform stored cross-site scripting by injecting malicious scripts via the Title and Text Block parameters in the text editing endpoint. This is achieved by injecting iframe...

[SECURITY] Fedora 44 Update: kf6-ktextwidgets-6.25.0-1.fc44

KDE Frameworks 6 Tier 3 addon with advanced text edting widgets...

CVE-2026-3400

A security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEditingConversion. The manipulation of the argument wpapskcrypto24g results in stack-based buffer overflow. The attack may be launched remotely. The...

CVE-2026-3400

A security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEditingConversion. The manipulation of the argument wpapskcrypto24g results in stack-based buffer overflow. The attack may be launched remotely. The...

CVE-2026-3400

A security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEditingConversion. The manipulation of the argument wpapskcrypto24g results in stack-based buffer overflow. The attack may be launched remotely. The...

CVE-2026-3400

A security flaw has been discovered in Tenda AC15 up to 15.13.07.13. Affected by this issue is some unknown functionality of the file /goform/TextEditingConversion. The manipulation of the argument wpapskcrypto24g results in stack-based buffer overflow. The attack may be launched remotely. The...

CVE-2026-3400

CVE-2026-3400 affects Tenda AC15 routers prior to 15.13.07.14, impacting the function in /goform/TextEditingConversion. The issue is a stack-based buffer overflow triggered by the wpapsk_crypto2_4g parameter, enabling remote exploitation. Multiple sources confirm an available exploit and remote a...

EUVD-2010-3114

Malware in sbrugna...

EUVD-2010-4171

Malware in sbrugna...

EUVD-2007-6488

Malware in sbrugna...

Adobe InCopy 缓冲区错误漏洞

Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. Adobe InCopy suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute code on the system or cause the application to crash...

CVE-2022-26198

Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a crafted payload injected into the Title text field...

Ruby on Rails: Action Text XSS (Rails 7.1.x)

The vulnerability in Action Text in Rails 7.1.x allows for cross-site scripting XSS when attempting to edit the text in which the crafted values were stored. The vulnerability was likely introduced in the PR that addressed a previous issue. It was confirmed that the XSS did not occur on the show...

[SECURITY] Fedora 37 Update: khotkeys-5.27.1-1.fc37

An advanced editor component which is used in numerous KDE applications requiring a text editing component...

Adobe InCopy out-of-bounds read vulnerability (CNVD-2023-05225)

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy has an out-of-bounds read vulnerability that can be exploited by attackers to bypass mitigations such as ASLR and cause sensitive memory leaks...

Adobe InCopy Buffer Overflow Vulnerability (CNVD-2023-05227)

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

Adobe InCopy post-release use vulnerability

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy has a use-after-release vulnerability that can be exploited by attackers to bypass mitigations such as ASLR and cause sensitive memory leaks...

Adobe InCopy heap buffer overflow vulnerability

Adobe InCopy is a text editing software for authoring from Adobe U.S. A heap buffer overflow vulnerability exists in Adobe InCopy, which could be exploited by an attacker to execute arbitrary code in the context of the current user...