CVE-2026-94214

A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack remotely. The exploit has been made public and...

CVE-2026-94214 ST Engineering iDirect iDX/Evo iDX Location Header redirect

A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack remotely. The exploit has been made public and...

EUVD-2026-83902

A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This affects an unknown part of the file /login.html of the component Management Service. Performing a manipulation of the argument Host results in open redirect. It is possible to...

CVE-2026-94214

ST Engineering iDirect Evolution and Velocity WebServer Evolution (versions up to 20260717 ) contain an open redirect vulnerability in the Management Service component, specifically in the /login.html file. The root cause is unsanitized manipulation of the Host argument, allowing a remote attacke...

YzmCMS Login Panel - Detect

YzmCMS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """YzmCMS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'YzmCMS Login Panel - Detect', 'description': 'YzmCMS logi...

CVE-2026-29933: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the /index/login.html component of YZMCMS v7.4 allows attackers to execute arbitrary Javascript in the context of the user's browser via modifying the referrer value in the request header...

CVE-2026-2971 a466350665 Smart-SSO Login login.html cross site scripting

A vulnerability was found in a466350665 Smart-SSO up to 2.1.1. Affected by this issue is some unknown functionality of the file smart-sso-server/src/main/resources/templates/login.html of the component Login. Performing a manipulation of the argument redirectUri results in cross site scripting. T...

CVE-2026-2971: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in a466350665 Smart-SSO up to 2.1.1. Affected by this issue is some unknown functionality of the file smart-sso-server/src/main/resources/templates/login.html of the component Login. Performing a manipulation of the argument redirectUri results in cross site scripting. T...

CVE-2022-4984: Improper Neutralization of Special Elements used in an SQL Command

ZenTao Biz 6.5, ZenTao Max 3.0, ZenTao Open Source Edition 16.5, and ZenTao Open Source Edition 16.5.beta1 contain an SQL injection vulnerability in the login functionality. The application does not properly validate the account parameter on /zentao/user-login.html before using it in a database...

EUVD-2010-5293

Malware in sbrugna...

EUVD-2015-9091

Malware in sbrugna...

CVE-2025-9310: Use of Hard-coded Credentials

A vulnerability was determined in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. Affected by this vulnerability is an unknown functionality of the file /carRentalwar/druid/login.html of the component Druid. Executing manipulation can lead to hard-coded credentials. The attack ma...

PT-2024-13677

Name of the Vulnerable Software and Affected Versions Kiuwan SAST version Description The issue allows for an unauthenticated reflected cross-site scripting attack on the login page "login.html" when SSO single sign-on is enabled. This is due to the message request parameter values being directly...

CVE-2023-49111: Improper Neutralization of Input During Web Page Generation

For Kiuwan installations with SSO single sign-on enabled, an unauthenticated reflected cross-site scripting attack can be performed on the login page "login.html". This is possible due to the request parameter "message" values being directly included in a JavaScript block in the response. This is...

CVE-2024-30802

An issue in Vehicle Management System 7.31.0.320230412 allows an attacker to escalate privileges via the login.html component...

Deyue Remote Vehicle Management System Security Vulnerability

Deyue Remote Vehicle Management System is a remote vehicle management system. A security vulnerability exists in Deyue Remote Vehicle Management System 7.31.0.320230412 that originates from a vulnerability that allows an attacker to escalate privileges via the login.html component...

CVE-2024-30802: Use of Default Password

An issue in Vehicle Management System 7.31.0.320230412 allows an attacker to escalate privileges via the login.html component...

CVE-2024-30802

The Deyue Remote Vehicle Management System (version 7.31.0.3_20230412 ) is vulnerable to a privilege escalation issue within the login.html component. An attacker can exploit this flaw to gain elevated permissions. Currently, no patched version is available; it is recommended to restrict access t...

Design/Logic Flaw

An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters...

CVE-2023-24709: Improper Control of Generation of Code

An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters...