CVE-2026-93460

A stored cross-site scripting vulnerability via appended strings in email form fields exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser...

CVE-2026-93463

A cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser...

CVE-2026-93463

The baserCMS content management system is vulnerable to Cross-Site Scripting (XSS) (CWE-79) due to a script validation bypass . If successfully exploited, an attacker may cause an arbitrary script to be executed within a user's web browser. Remediation involves updating the software to the latest...

EUVD-2026-89661

Cross-Site Scripting via Script Validation Bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser may be caused...

CVE-2026-93463

A cross-site scripting vulnerability via script validation bypass exists in baserCMS. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser...

msxml4-remediation

Corrección de MSXML 4.0 PowerShell Script de PowerShell para remediar hallazgos de seguridad relacionados con Microsoft XML Core Services MSXML 4.0 , que no es compatible y suele ser marcado por los escáneres de vulnerabilidades. Este script que hice anula el registro de los archivos .dll de MSXM...

React2Shell-Vulnerability-Verification-Script

Script de verificación de vulnerabilidad React2Shell verifyreactvulnerability.py ¿Qué es este script? Este es un script Python simple e independiente creado para ayudarte a determinar rápidamente si tu proyecto se ve afectado por la vulnerabilidad crítica React2Shell también conocida como...

CVE-2017-5638-Apache-Struts2

CVE-2017-5638 Apache Struts2 Código PHP de ejemplo de PoC Exploit para CVE-2017-5638 Uso php exploit.php "http://127.0.0.1:8080/example/index.action" "command" ÚSALO BAJO TU PROPIO RIESGO...

CVE-2021-26084-patch-

CVE-2021-26084 patch CVE-2021-26084 patch provided by "Confluence Security Advisory - 2021-08-25" this is just a workaround for linux based servers, attlasian has provided a new fixed verssion if you don't want to upgrade just patch it ! instalation download the cve-2021-26084-update file, and ma...

Malicious code in apl-rive-renderer (npm)

apl-rive-renderer is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username, working...

Malicious code in figma-to-apl (npm)

figma-to-apl is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username, working...

MAL-2026-17431 Malicious code in apl-rive-renderer (npm)

apl-rive-renderer is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username, working...

MAL-2026-17433 Malicious code in figma-to-apl (npm)

figma-to-apl is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username, working...

MAL-2026-17435 Malicious code in niksinnkatalapp (npm)

niksinnkatalapp is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username, working...

MAL-2026-17434 Malicious code in live-detection-dashboard (npm)

live-detection-dashboard is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username,...

MAL-2026-17432 Malicious code in brioche-apl-dev-env (npm)

brioche-apl-dev-env is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username, worki...

Malicious code in niksinnkatalapp (npm)

niksinnkatalapp is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username, working...

Malicious code in brioche-apl-dev-env (npm)

brioche-apl-dev-env is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username, worki...

Malicious code in live-detection-dashboard (npm)

live-detection-dashboard is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username,...

MAL-2026-17429 Malicious code in ai-workshop-radio-lambda (npm)

ai-workshop-radio-lambda is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username,...