PHP Login System 2.0.1 - Cross-Site Scripting

msaad1999's PHP-Login-System 2.0.1 contains a reflected cross-site scripting caused by unsanitized input in 'validator' parameter in /reset-password, letting remote attackers execute arbitrary JavaScript in a user's browser, exploit requires attacker to craft malicious URL id: CVE-2023-38875 info...

unbound: Unbound DNSSEC Validator NSEC3 Hash Calculation Limit Bypass via Negative Cache Code Path Leading to DoS

A flaw was found in Unbound's DNSSEC validator where the code path for consulting the negative cache for DS records does not honor the limit on NSEC3 hash calculations introduced in version 1.19.1. An adversary who controls a DNSSEC-signed zone can sign NSEC3 records with high iteration counts fo...

CVE-2017-16995

Vulnerability Description Ubuntu is an open-source GNU/Linux operating system primarily used on desktops, based on Debian GNU/Linux. Recently, a white-hat hacker disclosed a local privilege escalation vulnerability in the latest version of Ubuntu Ubuntu 16.04, assigned CVE-2017-16995. This...

CLSA-2026-1794321403 TuxCare security update for symfony/validator (2 CVEs)

TuxCare rebuilt symfony/validator to address 2 CVEs. Fixed in v4.4.48-p1+tuxcare...

unbound: Unbound DNSSEC Validator NSEC3 Hash Calculation Limit Bypass via Negative Cache Code Path Leading to DoS

A flaw was found in Unbound's DNSSEC validator where the code path for consulting the negative cache for DS records does not honor the limit on NSEC3 hash calculations introduced in version 1.19.1. An adversary who controls a DNSSEC-signed zone can sign NSEC3 records with high iteration counts fo...

cosmicsting-validator

A Cosmicsting POC, with a bash script to check all of our hosted sites to confirm the patch. This repository is provided to allow store owners / hosts to confirm the patch is applied on stores. Within check.bash add domains to the SITES list. https://www.sdj.pw/posts/magento2-cosmic-sting-check/...

ROOT-APP-NPM-CVE-2025-12758 CVE-2025-12758 in validator - Patched by Root

Root has patched CVE-2025-12758 in the validator package for Root:npm. Multiple fixed versions available...

Security Bulletin: Vulnerabilities in spring-context, logback-core and Another JSON Schema Validator might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in spring-context, logback-core and Another JSON Schema Validator. Vulnerabilities include VMware Tanzu Spring Framework could provide weaker than expected security, caused by a flaw related to disallowedFields...

DEBIAN-CVE-2026-93879

Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption resulting from improper escaping of user-controlled data in Expression Language EL expressions...

CVE-2026-93879

Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption resulting from improper escaping of user-controlled data in Expression Language EL expressions...

CVE-2026-93879 Hibernate Validator is affected by an expression language injection vulnerability

Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption resulting from improper escaping of user-controlled data in Expression Language EL expressions...

CVE-2026-93879 Hibernate Validator is affected by an expression language injection vulnerability

Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption resulting from improper escaping of user-controlled data in Expression Language EL expressions...

CVE-2026-93879

The Hibernate Validator library is vulnerable to a Denial of Service (DoS) attack due to uncontrolled resource consumption. The root cause is the improper escaping of user-controlled data within Expression Language (EL) expressions. This vulnerability impacts several products, including IBM WebSp...

IBM Hibernate Validator resource management error vulnerability

Versions 5.4.1.Final through 6.2.5.Final, 7.0.0.Alpha1 through 7.0.5.Final, 8.0.0.Alpha1 through 8.0.5.Final, 9.0.0.Beta2 through 9.0.1.Final, and 9.1.0.Alpha1 through 9.1.4.Final of IBM Hibernate Validator contain a resource management error vulnerability. This vulnerability stems from improper...

CVE-2025-12758

CVE-2025-12758: Validator.js isLength Unicode Variation Selector Bypass CVE ID: CVE-2025-12758 CVSS Score: 8.7 HIGH Severity: HIGH CWE: CWE-792 Incomplete Filtering of One or More Instances of Special Elements Published: November 26, 2025 Disclosed: October 19, 2025 Vulnerability Overview This...

CVE-2026-123125

The Symfony Validator component IpValidator incompletely classifies internal addresses in the filtered modes of the Ip constraint, so some internal addresses are accepted as public, which can lead to Server-Side Request Forgery SSRF in Symfony versions prior to 5.4.56, 6.x prior to 6.4.50, 7.x...

EulerOS Virtualization 2.15.1 : unbound (EulerOS-SA-2026-4678)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain condition...

EulerOS Virtualization 2.15.0 : unbound (EulerOS-SA-2026-4736)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain condition...

Linux Distros Unpatched Vulnerability : CVE-2026-123125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Symfony Validator component IpValidator incompletely classifies internal addresses in the filtered modes of the Ip constraint, so some internal addresses ar...

CVE-2026-87830

A flaw was found in Apache WSS4J. In the streaming security policy validator, specific XML Path Language XPath expressions can fail to resolve against actual message structures. A remote attacker can exploit this issue to bypass security policy checks by sending message elements that lack require...