CVE-2026-103629

An integer overflow flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562038679...

CVE-2026-100791

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

CVE-2026-100774

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

CVE-2026-105651

Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's...

CVE-2024-23998

Another Redis Desktop Manager PoC Ein Proof-of-Concept für die Schwachstelle CVE-2024-23998. 1. Übersicht der Schwachstelle: Schwachstellen-Thema: Lokale Codeausführung über XSS Betroffene Version: = 1.6.6 Angriffsart: Remote Code Execution Angriffsvektoren: Um die Schwachstelle auszunutzen,...

CVE-2026-100778

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Core & HTML component...

CVE-2023-49539

CVE-2023-49539 Book Store Management System v1.0 – Cross-site scripting XSS-Schwachstelle in „index.php/category“ – verwundbares Feld: „Kategorie-Name“ Beschreibung : Book Store Management System v1.0 weist eine Cross-site-Scripting-Schwachstelle XSS in „/bsmsci/index.php/category“ auf. Diese...

CVE-2026-105651 Ghost: Stored XSS via Bookmark Card Images

Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's...

CVE-2026-105651

Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's...

CVE-2026-105651 Ghost: Stored XSS via Bookmark Card Images

Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's...

CVE-2026-105651 Ghost: Stored XSS via Bookmark Card Images

Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's...

CVE-2026-105651

The Ghost Node.js content management system (versions 5.94.0 through 6.64.0 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. When creating a bookmark card, the system could fetch and store non-image files from external websites as icons or thumbnails. This allowed staff users, includi...

CVE-2026-104979

Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes descriptionhtml through Issue.objects.create... without calling validatehtmlcontent from nh3. Any authenticated user, including a new user with no workspace memberships, can pla...

EUVD-2026-92538

Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes descriptionhtml through Issue.objects.create... without calling validatehtmlcontent from nh3. Any authenticated user, including a new user with no workspace memberships, can pla...

htmlpurifier

HTML Purifier HTML Purifier é uma solução de filtragem de HTML que usa uma combinação única de listas de permissões robustas e análise agressiva para garantir que não apenas os ataques XSS sejam frustrados, mas também que o HTML resultante esteja em conformidade com os padrões. O HTML Purifier é...

CVE-2024-54160-Opensearch-HTML-And-Injection-Stored-XSS

CVE-2024-54160-Opensearch-HTML-Injection + Stored XSS Es wurde festgestellt, dass das Opensearch-Plugin namens "reports" in Version 2.18.0 anfällig für HTML-Injection war. Die Berichtsfunktion ermöglichte es Benutzern, HTML im Kopf- und Fußbereich zu speichern, während sie eine neue...

Mailphish

Mailphish Programmiert von Pro MCracker Mailphish hilft Ihnen, schnell und einfach professionelle Phishing-E-Mails zu erstellen Besuchen Sie unsere Websites, um Hacking-Methoden zu lernen https://crackcodes.xyz Und https://crackcodes.in Wenn Sie den Code kopieren und Ihren eigenen erstellen,...

CVE-2021-24545

CVE-2021-24545 Eine XSS-Schwachstelle, die in einem Plugin entdeckt wurde, dessen Vertrieb als Plugin mittlerweile eingestellt wurde. WordPress Plugin HTML Author Bio description XSS Die Schwachstelle entsteht durch eine unzureichende Validierung des Parameters description in /wp-admin/profile.ph...

CVE-2026-102426

Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dcfilter request parameter, split on the delimiter "l-r", HTML-escaped inside the data-value attribute, and then...

CVE-2021-3130

CVE-2021-3130 Vorgeschlagene Beschreibung In der Anwendung Open-AudIT bis Version 4.0.2 verbirgt die Weboberfläche SSH-Geheimnisse, Windows-Passwörter und SNMP-Strings vor Benutzern mittels HTML-Passwortfeld-Verschleierung. Durch die Verwendung von Entwicklertools oder ähnlichem ist es möglich, d...