Lucene search
+L

40570 matches found

GithubExploit
GithubExploit
•added 2026/06/05 2:25 p.m.•123 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2026-33829 Este repositorio contiene una herramienta auto...

4.3CVSS5.7AI score0.03514EPSS
SaveExploits5
NVD
NVD
•added 2026/06/05 2:16 p.m.•34 views

CVE-2026-50230

Lyrion Music Server 9.2.0 contains an unauthenticated reflected cross-site scripting vulnerability in the server.log endpoint that allows attackers to inject arbitrary HTML and JavaScript code through the search parameter. Attackers can craft malicious URLs with JavaScript payloads in the search...

6.1CVSS0.00538EPSS
SaveExploits3References2
NVD
NVD
•added 2026/06/05 2:16 p.m.•34 views

CVE-2026-50235

Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to properly sanitize user input before displaying it in search forms. Attackers can inject malicious scripts through unfiltered search parameters to execute arbitrary JavaScri...

6.1CVSS0.00263EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2026/06/05 1:24 p.m.•14 views

CVE-2026-50235

Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to properly sanitize user input before displaying it in search forms. Attackers can inject malicious scripts through unfiltered search parameters to execute arbitrary JavaScri...

6.1CVSS6.3AI score0.00263EPSS
SaveExploits2References3Affected Software1
EUVD
EUVD
•added 2026/06/05 1:24 p.m.•28 views

EUVD-2026-34834

Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to properly sanitize user input before displaying it in search forms. Attackers can inject malicious scripts through unfiltered search parameters to execute arbitrary JavaScri...

6.1CVSS5.6AI score0.00263EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2026/06/05 1:24 p.m.•22 views

CVE-2026-50235 Lyrion Music Server 9.2.0 Reflected XSS via search Parameters

Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to properly sanitize user input before displaying it in search forms. Attackers can inject malicious scripts through unfiltered search parameters to execute arbitrary JavaScri...

6.1CVSS6.3AI score0.00263EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2026/06/05 1:24 p.m.•60 views

CVE-2026-50235 Lyrion Music Server 9.2.0 Reflected XSS via search Parameters

Lyrion Music Server 9.2.0 contains a reflected cross-site scripting vulnerability in advanced search parameters that fail to properly sanitize user input before displaying it in search forms. Attackers can inject malicious scripts through unfiltered search parameters to execute arbitrary JavaScri...

6.1CVSS0.00263EPSS
SaveExploits2References2
CVE
CVE
•added 2026/06/05 1:24 p.m.•89 views

CVE-2026-50235

Affected software: Lyrion Music Server 9.2.0. Vulnerability: reflected XSS in advanced search parameters that fail to sanitize user input before displaying it in search forms. Impact: can execute arbitrary JavaScript in users’ browsers and potentially steal session information. Exploitation/Detai...

6.1CVSS6.3AI score0.00263EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2026/06/05 1:24 p.m.•17 views

CVE-2026-50230 Lyrion Music Server 9.2.0 Reflected XSS via server.log

Lyrion Music Server 9.2.0 contains an unauthenticated reflected cross-site scripting vulnerability in the server.log endpoint that allows attackers to inject arbitrary HTML and JavaScript code through the search parameter. Attackers can craft malicious URLs with JavaScript payloads in the search...

6.1CVSS6.1AI score0.00538EPSS
SaveExploits3References2
EUVD
EUVD
•added 2026/06/05 1:24 p.m.•27 views

EUVD-2026-34829

Lyrion Music Server 9.2.0 contains an unauthenticated reflected cross-site scripting vulnerability in the server.log endpoint that allows attackers to inject arbitrary HTML and JavaScript code through the search parameter. Attackers can craft malicious URLs with JavaScript payloads in the search...

6.1CVSS6AI score0.00538EPSS
SaveExploits3References2
CVE
CVE
•added 2026/06/05 1:24 p.m.•60 views

CVE-2026-50230

Lyrion Music Server 9.2.0 is affected by an unauthenticated reflected cross-site scripting vulnerability in the server.log endpoint . The issue allows attackers to inject arbitrary HTML and JavaScript through the search parameter , enabling code execution in users’ browsers within the context of ...

6.1CVSS6.1AI score0.00538EPSS
SaveExploits3References2
Cvelist
Cvelist
•added 2026/06/05 1:24 p.m.•84 views

CVE-2026-50230 Lyrion Music Server 9.2.0 Reflected XSS via server.log

Lyrion Music Server 9.2.0 contains an unauthenticated reflected cross-site scripting vulnerability in the server.log endpoint that allows attackers to inject arbitrary HTML and JavaScript code through the search parameter. Attackers can craft malicious URLs with JavaScript payloads in the search...

6.1CVSS0.00538EPSS
SaveExploits3References2
attackerkb
attackerkb
•added 2026/06/05 1:24 p.m.•21 views

CVE-2026-50230

Lyrion Music Server 9.2.0 contains an unauthenticated reflected cross-site scripting vulnerability in the server.log endpoint that allows attackers to inject arbitrary HTML and JavaScript code through the search parameter. Attackers can craft malicious URLs with JavaScript payloads in the search...

6.1CVSS6.1AI score0.00538EPSS
SaveExploits3References3Affected Software1
NVD
NVD
•added 2026/06/05 7:16 a.m.•33 views

CVE-2026-21825

HCL Digital Experience Compose is affected by a reflected cross-site scripting XSS vulnerability in the search center. An attacker could execute arbitrary JavaScript in the victim's browser...

6.1CVSS0.00152EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/05 6:03 a.m.•79 views

CVE-2026-21825

HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center. An attacker could execute arbitrary JavaScript in the victim’s browser. The CVE-2026-21825 entry lists a CVSS v3.1 base score of 6.1 (MEDIUM) with network access, low privilege...

6.1CVSS6.1AI score0.00152EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/06/05 6:03 a.m.•13 views

CVE-2026-21825

HCL Digital Experience Compose is affected by a reflected cross-site scripting XSS vulnerability in the search center. An attacker could execute arbitrary JavaScript in the victim's browser...

6.1CVSS5.5AI score0.00152EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/06/05 6:03 a.m.•31 views

EUVD-2026-34788

HCL Digital Experience Compose is affected by a reflected cross-site scripting XSS vulnerability in the search center. An attacker could execute arbitrary JavaScript in the victim's browser...

6.1CVSS5.5AI score0.00152EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/05 6:03 a.m.•74 views

CVE-2026-21825 HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center

HCL Digital Experience Compose is affected by a reflected cross-site scripting XSS vulnerability in the search center. An attacker could execute arbitrary JavaScript in the victim's browser...

6.1CVSS0.00152EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/05 6:03 a.m.•22 views

CVE-2026-21825 HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center

HCL Digital Experience Compose is affected by a reflected cross-site scripting XSS vulnerability in the search center. An attacker could execute arbitrary JavaScript in the victim's browser...

6.1CVSS6.1AI score0.00152EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/06/05 12:53 a.m.•27 views

Malicious code in discord-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aa1d4766f5f0c7701bef21a8e9391a0b851eb0ad75d711143b670f4491bd3e2 No concrete indicators of installer-side harm were observed in this package version. There is no evidence of credential reads, environment scraping,...

5.9AI score
SaveExploits0References6
Rows per page
Query Builder