EUVD-2026-102928

pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNodecompare in ixml/src/node.c passes the nullable nodeValue, namespaceURI, prefix, and localName fields directly to strcmp. Non-namespaced attributes created by ixmlDocumentcreateAttribute...

CVE-2026-55862

pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multiple ixml DOM traversal functions process deeply nested XML with unbounded recursion. The iterative XML parser accepts the document, but ixmlPrintDomTreeRecursive in ixml/src/ixml.c and...

EUVD-2026-102927

pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multiple ixml DOM traversal functions process deeply nested XML with unbounded recursion. The iterative XML parser accepts the document, but ixmlPrintDomTreeRecursive in ixml/src/ixml.c and...

OESA-2026-4346 qt5-qtbase security update

Qt is a software toolkit for developing applications. Security Fixes: QDomDocument XML parsing is vulnerable to a remotely-triggerable denial-of-service crash when processing untrusted input.CVE-2026-19248...

[SECURITY] [DSA 6566-1] expat security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6566-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 16, 2026 https://www.debian.org/security/faq -...

WordpressPingbackPortScanner

WordpressPingbackPortScanner Wordpress exposes a so called Pingback API to link to other blogposts. Using this feature you can scan other hosts on the intra- or internet via this server. You can also use this feature for some kind of distributed port scanning: You can scan a single host using...

CVE-2026-63430

ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2, and 4.1.3, applications that explicitly allow the math tag, annotation-xml, and at least one raw-text HTML element while disallowing the encoding attribute can permit mutation cross-site scripting. ammonia...

Linux Distros Unpatched Vulnerability : CVE-2026-55862

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multiple ixml DOM traversal functions process deeply nested XML...

CVE-2026-57486: NULL Pointer Dereference

pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNodecompare in ixml/src/node.c passes the nullable nodeValue, namespaceURI, prefix, and localName fields directly to strcmp. Non-namespaced attributes created by ixmlDocumentcreateAttribute...

UBUNTU-CVE-2026-63430

ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2, and 4.1.3, applications that explicitly allow the math tag, annotation-xml, and at least one raw-text HTML element while disallowing the encoding attribute can permit mutation cross-site scripting. ammonia...

Debian dsa-6566 : expat - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6566 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6566-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-63430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2, and 4.1.3, applications that explicitly allow the math tag,...

CVE-2026-110656

A flaw was found in miniupnpc. An adjacent attacker can cause a Denial of Service DoS due to an out-of-bounds read vulnerability in the XML parser's namespace handling. A malicious or spoofed Universal Plug and Play UPnP gateway on the local network can exploit this flaw by sending a crafted devi...

CVE-2026-110655

A flaw was found in miniupnpc. An out-of-bounds read vulnerability in the XML attribute parser can lead to a Denial of Service DoS by crashing the client application. A network-adjacent attacker operating a rogue Universal Plug and Play UPnP gateway can exploit this by sending specially crafted...

CVE-2026-110604

A flaw was found in Mini-XML. In environments where the system locale does not use a period as the decimal separator, an attacker can supply a specially crafted XML file containing a long decimal number to trigger an off-by-one stack-based buffer overflow in the mxmlstrtod function. This issue ca...

CVE-2026-63430

ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2, and 4.1.3, applications that explicitly allow the math tag, annotation-xml, and at least one raw-text HTML element while disallowing the encoding attribute can permit mutation cross-site scripting. ammonia...

DEBIAN-CVE-2026-63430

ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2, and 4.1.3, applications that explicitly allow the math tag, annotation-xml, and at least one raw-text HTML element while disallowing the encoding attribute can permit mutation cross-site scripting. ammonia...

CVE-2026-111252

A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS parsed XML without an effective limit on entity expansion. A document with a DOCTYPE that declares internal entities can expand to a very large value and exhaust the server...

CVE-2026-111252 OpenNMS denial of service via XML entity expansion

A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS parsed XML without an effective limit on entity expansion. A document with a DOCTYPE that declares internal entities can expand to a very large value and exhaust the server...

CVE-2026-111252

Multiple versions of OpenNMS Meridian and Horizon are vulnerable to a denial of service (DoS) condition due to insufficient limits on XML entity expansion . An authenticated user with provisioning access can trigger memory exhaustion by submitting a document with a DOCTYPE declaring internal enti...