CentOS-Control-Web-Panel-CVE

CentOS Control Web Panel versión 0.9.8.836 - 0.9.8.847 El 29 de junio de 2019, nuestro equipo comenzó a buscar vulnerabilidades en CentOS Control Web Panel CWP versión 0.9.8.836 y encontramos algunas vulnerabilidades críticas. Algunas de las vulnerabilidades que encontramos pueden encadenarse par...

Important: Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.4 Security Update

Red Hat Edge Manager Version 1.1.4 Security Update Red Hat Edge Manager RHEM provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a...

CVE-2025-56515

CVE-2025-56515 Vulnerabilidad de Cross-Site Scripting XSS en la aplicación de chat Fiora CVE-2025-56515: Vulnerabilidad de Cross-Site Scripting XSS en la aplicación de chat Fiora Resumen de la vulnerabilidad CVE ID : CVE-2025-56515 Tipo de vulnerabilidad : Cross-Site Scripting XSS Tipo de ataque ...

CVE-2025-63708

CVE-2025-63708 CVE ID: CVE-2025-63708 Assigned: 11-12-2025 Problem Type: CWE-79 Cross-Site Scripting Affected Product: “AI Font Matcher” posted 2025-10-10, nid=18425 Product page: https://www.sourcecodester.com/javascript/18425/ai-font-matcher-using-html-css-and-javascript-source-code.html...

CVE-2026-92385

A Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System version 1.0 , specifically in the file /admin/update_category.php (component: Category Update). The affected function is not publicly identified. An attacker with high privileges (i.e., an authenticate...

Trickster-HTB

Informe de Explotación de Trickster Acerca de Trickster Trickster es una máquina Linux de dificultad media que presenta múltiples vulnerabilidades en diferentes servicios. Este informe describe el proceso de explotación de estas vulnerabilidades para lograr un compromiso completo del sistema. Pas...

CVE-2023-24203-and-CVE-2023-24204

CVE-2023-24203-and-CVE-2023-24204 Introduction In the ever-evolving landscape of cybersecurity, web applications remain a prime target for attackers seeking to exploit vulnerabilities. Recently, two critical vulnerabilities were discovered in the SourceCodester Simple Customer Relationship...

rConfig 3.9.4 - Cross-Site Scripting

The rConfig 3.9.4 is vulnerable to cross-site scripting. The devicemgmnt.php file improperly validates the request coming from the user input. Due to this flaw, An attacker can exploit this vulnerability by crafting arbitrary javascript in deviceId GET parameter of devicemgmnt.php resulting in...

OpenEMR < 7.0.1 - Cross-Site Scripting

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1. id: CVE-2023-2948 info: name: OpenEMR 7.0.1 - Cross-Site Scripting author: ritikchaddha,princechaddha severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr...

Nagios XI 5.7.5 - Cross-Site Scripting

Nagios XI 5.7.5 contains a cross-site scripting vulnerability in the file /usr/local/nagiosxi/html/admin/sshterm.php, due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal session cookies, or it can be chained with th...

CVE-2022-3546

CVE-2022-3546 https://vulners.com/cve/CVE-2022-3546 Se encontró una vulnerabilidad en SourceCodester Simple Cold Storage Management System 1.0 y fue clasificada como problemática. Esta cuestión afecta a una funcionalidad desconocida del archivo /csms/admin/?page=user/list del componente Create Us...

CVE-2025-60654

CVE-2025-60654 - Cross-Site Scripting XSS almacenado en la descripción del anuncio | ---|--- Investigadores| DotAdrien Gravedad| 7.2 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Software| Script Pag...

CVE-2025-57926

Sink: According to the mechanism of WordPress Core, XSS is prevented in post content, but with this plugin, the content is encoded and then decoded when rendered, unintentionally creating an XSS vulnerability." PoC: The base64 encoded payload is PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==...

osticket-stored-xss-security-assessment

CVE-2026-36214 - osTicket Stored XSS via Bootstrap Tooltip Consultant-Style Cybersecurity Report Professional vulnerability assessment report for osTicket stored cross-site scripting, including business impact, remediation, and mitigation strategy. 📍 Report Snapshot...

Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS

CVE-2021-46068 Exploit Title: Vehicle Service Management System - 'MyAccount' Stored Cross-Site Scripting XSS Almacenado Exploit Author: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIO Referencias: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...

CVE-2022-29380

CVE-2022-29380 CVE-2022-29380 root@kitploit: Date: 25/05/2022 Author: OpenXP Team Software: Academy LMS Version: Academy LMS = v4.3 Type: Cross-Site Scripting OWASP TOP 10: A03:2021-Injection CWE: CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' References...

CVE-2017-0055-PoC

CVE-2017-0055 PoC MICROSOFT IIS 7.0/7.5/8.0/8.5/10 /UNCPATH/ CROSS SITE SCRIPTING Referencia: https://nvd.nist.gov/vuln/detail/CVE-2017-0055 Puntuación base: 6.1 Gravedad: Media Exploit: http://vulniis/uncpath/%3Cimg%20onerror=alert'xss'%20src=/%3E:/...

Vehicle-Service-Management-System-Service-Requests-Stored-Cross-Site-Scripting-XSS

CVE-2021-46070 Título del Exploit: Vehicle Service Management System - 'Service Requests' Cross Site Scripting XSS almacenado Autor del Exploit: SANU P.L CVE: CVE-2021-46070 CVSS: 4.8 MEDIO Referencias:...

CVE-2023-32961

CVE-2023-32961 Este repositorio trata sobre una vulnerabilidad de XSS en el plugin Zotpress de WordPress. Detalles del componente Nombre del componente Zotpress Versión vulnerable ≤ 7.3.3 Slug del componente zotpress Enlace del componente https://wordpress.org/plugins/zotpress/ Requisito previo S...

CVE-2023-29439

CVE-2023-29439 This repository is about XSS vulnerability in Wordpress Foogallery Plugin. Vulenerability details Description In Foogallery 2.2.35 and earlier, the function foogalleryimageeditormodal in foogallery/includes/admin/class-gallery-attachment-modal.php is vulnerable to XSS attack...