9602 matches found
PT-2026-89124
SkillTree is a micro-learning gamification platform. Prior to version 4.4.2, two independent code flaws combine into a single exploitable attack chain, with three distinct exploitation paths of escalating impact. StringHighlighter.js builds an HTML string by interpolating raw value substrings...
CVE-2026-71803
money-pos 1.0 contains a stored Cross-Site Scripting XSS vulnerability. When processing returns, the backend fails to filter or escape the goodsName parameter, directly concatenating it into the order log description; the frontend subsequently renders this content using v-html. An attacker with...
CVE-2026-71803
The money-pos 1.0 software is vulnerable to a stored Cross-Site Scripting (XSS) vulnerability. The root cause is that the backend fails to filter or escape the goodsName parameter during return processing, concatenating it directly into the order log description. The frontend then renders this co...
EUVD-2026-75158
money-pos 1.0 contains a stored Cross-Site Scripting XSS vulnerability. When processing returns, the backend fails to filter or escape the goodsName parameter, directly concatenating it into the order log description; the frontend subsequently renders this content using v-html. An attacker with...
PT-2026-89152
money-pos 1.0 contains a stored Cross-Site Scripting XSS vulnerability. When processing returns, the backend fails to filter or escape the goodsName parameter, directly concatenating it into the order log description; the frontend subsequently renders this content using v-html. An attacker with...
CVE-2026-71803
money-pos 1.0 contains a stored Cross-Site Scripting XSS vulnerability. When processing returns, the backend fails to filter or escape the goodsName parameter, directly concatenating it into the order log description; the frontend subsequently renders this content using v-html. An attacker with...
HermiCache: Enclave-Aware Cache Replacement for Trusted Execution Environments
Trusted Execution Environments TEEs protect enclave memory from untrusted software but remain vulnerable to cache-based side-channel attacks due to shared microarchitectural resources. Existing countermeasures use techniques such as cache partitioning or randomization: these solutions are not ide...
AutoTrans: AI-Assisted Automatic Translation of Security Assertions for RISC-V Processors
Reusing a set of verified security assertions across RISC-V processor targets remains one of the most expensive bottlenecks in hardware security verification. Manual translation takes hours per assertion. Raw LLM translation is fast but unreliable, introducing signal hallucination, where the mode...
CVE-2026-71803: Improper Neutralization of Input During Web Page Generation
money-pos 1.0 contains a stored Cross-Site Scripting XSS vulnerability. When processing returns, the backend fails to filter or escape the goodsName parameter, directly concatenating it into the order log description; the frontend subsequently renders this content using v-html. An attacker with...
CVE-2026-80083
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally...
CVE-2026-72961
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2026-69910
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network...
CVE-2026-69603
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...
CVE-2026-69553
Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network...
CVE-2026-69910
Windows Hyper-V is affected by a stack-based buffer overflow that allows an unauthorized attacker to achieve remote code execution over the network without any privileges or user interaction. The vulnerability is rated CVSS 9.8 (Critical) by Microsoft, with high impact to confidentiality, integri...
EUVD-2026-73690
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network...
CVE-2026-72961
CVE-2026-72961 is an out-of-bounds read vulnerability in Windows Hyper-V that allows a local, authorized attacker to elevate privileges. The CVSS 3.1 score is 8.2 (HIGH) , with a vector of AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H, indicating that exploitation requires existing high privileges on the s...
EUVD-2026-73676
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2026-80083
CVE-2026-80083 is an untrusted pointer dereference in Windows Hyper-V that allows an authorized local attacker to execute code, with changed scope (privilege escape). The CVSS 3.1 score is 8.8 (HIGH) (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H), reflecting high impact to confidentiality, integrity, and ...