Logo
Retour à la veille

CVE-2026-36163

Publié : 7 juillet 2026
Modifié : 7 juillet 2026
Lien officiel NVD

Description détaillée

An HTML injection vulnerability in the file view endpoint of LiquidFiles v4.2.7 allows authenticated attackers to execute arbitrary JavaScript in the context of the victim's browser via the uploading of and user interaction with a crafted HTML file.

Références et Patchs

https://docs.liquidfiles.com/release_notes/version_4-2-x.htmlhttps://securing.pl/en/bypassing-csp-to-exploit-stored-xss-in-liquidfiles/

Dernières Vulnérabilités

CVE-2026-60002

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

VOIR DÉTAILS

CVE-2026-60001

sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.

VOIR DÉTAILS

CVE-2026-60000

sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.

VOIR DÉTAILS