Lucene search
+L

632 matches found

Kitploit
Kitploit
•added 2026/10/13 6:12 p.m.•20 views

NmapReportTemplate

Nmap Report Template Template designed to dynamically display information obtained from Nmap Scan Screenshots Usage 1. Download the nmaptemplatereport.xsl file and, when running Nmap , pass the file as a stylesheet. Example nmap --open -A -T4 -F --script vulners -oX scanoutput.xml --stylesheet...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/13 1:52 a.m.•25 views

nmap-bootstrap-xsl

nmap-bootstrap-xsl Have a nice interface for checking the result of your Nmap scans. This software must not be used by military or secret service organisations. How to use 1. New Nmap scan Add the nmap-bootstrap.xsl as stylesheet to your Nmap scan with the --stylesheet argument : nmap -sS -T4 -A...

6.4AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/12 12:31 a.m.•18 views

CVE-2011-1571

CVE-2011-1571 Summary Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition CE 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors. CVE Detail :...

6.8CVSS6.7AI score0.0847EPSS
SaveExploits5
Github Security Blog
Github Security Blog
•added 2026/10/07 8:28 p.m.•13 views

Payload: Uploaded XML files could execute same-origin JavaScript

Impact Under certain local upload configurations, an uploaded XML file and stylesheet could execute JavaScript in the Payload origin when a logged-in user opens the file. You are affected if: - You accept XML uploads accepted by default. Patches Users should upgrade Payload packages to = 3.90.0 o...

8.6CVSS5.9AI score0.00259EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2026/10/07 8:28 p.m.•12 views

GHSA-9QPG-3CF8-W33X Payload: Uploaded XML files could execute same-origin JavaScript

Impact Under certain local upload configurations, an uploaded XML file and stylesheet could execute JavaScript in the Payload origin when a logged-in user opens the file. You are affected if: - You accept XML uploads accepted by default. Patches Users should upgrade Payload packages to = 3.90.0 o...

8.6CVSS6AI score0.00259EPSS
SaveExploits0References5
Fedora
Fedora
•added 2026/10/03 12:29 a.m.•9 views

[SECURITY] Fedora 45 Update: docbook-style-xsl-1.79.2-29.fc45

These XSL stylesheets allow you to transform any DocBook XML document to other formats, such as HTML, FO, and XHMTL. They are highly customizable...

7.5CVSS5.8AI score0.00561EPSS
SaveExploits0
Fedora
Fedora
•added 2026/10/03 12:29 a.m.•6 views

[SECURITY] Fedora 45 Update: docbook5-style-xsl-1.79.2-28.fc45

These XSL namespace aware stylesheets allow you to transform any DocBook 5 document to other formats, such as HTML, manpages, FO, XHMTL and other formats. They are highly customizable. For more information see W3C page about XSL...

7.5CVSS5.8AI score0.00561EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•9 views

Rocky Linux 9.6 [TuxCare] Security Update: libxslt / libxslt-devel (ALMALINUX9.6:CLSA-2026:1782722295)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782722295 advisory. - A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and...

5.5CVSS6.2AI score0.00173EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•12 views

AlmaLinux 9.6 [TuxCare] Security Update: yelp / yelp-devel / yelp-libs (ALMALINUX9.6:CLSA-2026:1784539549)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784539549 advisory. - A flaw was found in Yelp due to an overly permissive Content Security Policy CSP implementation provided by yelp-xsl. A malicious Flatpak...

7.1CVSS6AI score0.00179EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•10 views

AlmaLinux 9.6 [TuxCare] Security Update: libxslt / libxslt-devel (ALMALINUX9.6:CLSA-2026:1782722295)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782722295 advisory. - A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and...

5.5CVSS6.3AI score0.00173EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•10 views

Rocky Linux 8 [CIQ] Security Update: yelp / yelp-debuginfo / yelp-debugsource / yelp-devel / yelp-libs / etc (crlsa-2026_47177)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202647177 advisory. yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications CVE-2026-13601 Tenable has extracted the...

7.1CVSS5.9AI score0.00179EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•8 views

Rocky Linux 9.6 [TuxCare] Security Update: yelp / yelp-devel / yelp-libs (ALMALINUX9.6:CLSA-2026:1784539549)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784539549 advisory. - A flaw was found in Yelp due to an overly permissive Content Security Policy CSP implementation provided by yelp-xsl. A malicious Flatpak...

7.1CVSS6AI score0.00179EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•10 views

Rocky Linux 9 [CIQ] Security Update: yelp / yelp-debuginfo / yelp-debugsource / yelp-devel / yelp-libs / etc (crlsa-2026_47178)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202647178 advisory. yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications CVE-2026-13601 Tenable has extracted the...

7.1CVSS5.9AI score0.00179EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•4 views

AlmaLinux 9.2 [TuxCare] Security Update: libxslt / libxslt-devel (ALMALINUX9.2:CLSA-2026:1783418975)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783418975 advisory. - A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and...

5.5CVSS6.3AI score0.00173EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•9 views

AlmaLinux 9.2 [TuxCare] Security Update: yelp / yelp-devel / yelp-libs (ALMALINUX9.2:CLSA-2026:1783700414)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783700414 advisory. - A flaw was found in Yelp due to an overly permissive Content Security Policy CSP implementation provided by yelp-xsl. A malicious Flatpak...

7.1CVSS6AI score0.00179EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/08 1:17 a.m.•10 views

CVE-2026-76971

Due to a Server-Side Request Forgery SSRF vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execution of...

6.5CVSS0.0025EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/08 12:13 a.m.•17 views

CVE-2026-76971 Server-Side Request Forgery in SAP Manufacturing Integration and Intelligence

Due to a Server-Side Request Forgery SSRF vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execution of...

6.5CVSS6.3AI score0.0025EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/08 12:13 a.m.•37 views

CVE-2026-76971 Server-Side Request Forgery in SAP Manufacturing Integration and Intelligence

Due to a Server-Side Request Forgery SSRF vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execution of...

6.5CVSS0.0025EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/08 12:13 a.m.•22 views

EUVD-2026-72587

Due to a Server-Side Request Forgery SSRF vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execution of...

6.5CVSS6.1AI score0.0025EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/08 12:13 a.m.•31 views

CVE-2026-76971

SAP Manufacturing Integration and Intelligence contains a Server-Side Request Forgery (SSRF) vulnerability that allows an attacker to cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execut...

6.5CVSS6.3AI score0.0025EPSS
SaveExploits0References2
Rows per page
Query Builder