Researcher bypasses six of eight popular SVG sanitizers
Namespace tricks, animated JavaScript URLs and XSLT data URLs execute script, including via a Firefox response header.
52
Organization
PortSwigger
- Mentions · 7d1
- Mentions · 30d1
- All mentions3
- First seenAug 19, 2026
- Last mentioned2d ago
Timeline
3 articles · newest firstCross-Site Scripting (XSS) Cheat Sheet
PortSwigger's XSS cheat sheet lists filter-bypass patterns for script injection across major browsers, without a new CVE.
12
Risky Bulletin: Slovakia finds Russian backdoor in traffic speed cameras
Slovakia's NBU found an SMS-triggered backdoor in Russian-made NERO R-ONE traffic cameras, pausing a 279-unit deployment.
72
Appears with
- Socket Securityorganization · 1
- PortSwiggervendor · 1
- NBUorganization · 1
- Slovakia Interior Ministryvictim · 1
- Risky Businessorganization · 1
- Web Security Academyproduct · 1
- CORDON PRO.Mproduct · 1
- NEROvendor · 1
- Semiconvendor · 1
- sanitize-svgproduct · 1
- DOMPurifyproduct · 1
- NERO R-ONEproduct · 1
- svg-sanitizerproduct · 1
- safe-svgproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.