131 matches found
CVE-2026-1146
A vulnerability has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this issue is some unknown functionality of the file /php/apiregisterpatient.php. Such manipulation of the argument firstName/lastName leads to cross site scripting. The...
CVE-2026-1146
creationtimestamp| type| source ---|---|--- 2026-01-19 12:17:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcrmqpubln2x...
CVE-2026-1146 SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System api_register_patient.php cross site scripting
A vulnerability has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this issue is some unknown functionality of the file /php/apiregisterpatient.php. Such manipulation of the argument firstName/lastName leads to cross site scripting. The...
CVE-2026-1146 SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System api_register_patient.php cross site scripting
A vulnerability has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this issue is some unknown functionality of the file /php/apiregisterpatient.php. Such manipulation of the argument firstName/lastName leads to cross site scripting. The...
MiracleLinux 4 : libvirt-0.8.1-27.5.0.1.AXS4 (AXSA:2011-132:01)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-132:01 advisory. Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd...
MiracleLinux 3 : libvirt-0.8.2-15.3.0.1.AXS3 (AXSA:2011-130:02)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-130:02 advisory. Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd...
CVE-2025-14928
creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1146/ 2025-12-23 21:34:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771027410495980...
CVE-2025-1146
CrowdStrike uses industry-standard TLS transport layer security to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where o...
CVE-2025-1146
creationtimestamp| type| source ---|---|--- 2025-02-12 18:31:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113992340756875259 2025-02-12 18:41:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113992380803491738 2025-02-12 18:47:51+00:00| seen|...
CVE-2025-1146 CrowdStrike Falcon Sensor for Linux TLS Issue
CrowdStrike uses industry-standard TLS transport layer security to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where o...
CVE-2025-1146 CrowdStrike Falcon Sensor for Linux TLS Issue
CrowdStrike uses industry-standard TLS transport layer security to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where o...
CVE-2024-1146
creationtimestamp| type| source ---|---|--- 2024-03-19 13:26:46+00:00| seen| https://t.me/ctinow/211446 2024-03-19 13:31:20+00:00| seen| https://t.me/ctinow/211465...
CVE-2024-1146
CVE-2024-1146 concerns Devklan’s Alma Blog. Affected: versions ≤ 2.1.10. Vulnerability: cross-site scripting via storing a malicious JavaScript payload in the application by adding content to the public-facing fields Community Description or Community Rules . Impact: could enable execution of inj...
CVE-2024-1146 Cross-site Scripting at Alma Devklan Blog
Cross-Site Scripting vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an attacker to store a malicious JavaScript payload within the application by adding the payload to 'Community Description' or 'Community Rules'...
CVE-2024-1146 Cross-site Scripting at Alma Devklan Blog
Cross-Site Scripting vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an attacker to store a malicious JavaScript payload within the application by adding the payload to 'Community Description' or 'Community Rules'...
MSC-2021-1146
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
CVE-2023-1146
creationtimestamp| type| source ---|---|--- 2023-03-02 07:33:57+00:00| seen| https://t.me/cibsecurity/59301 2025-03-07 22:36:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6908...
CVE-2023-1146
Summary: CVE-2023-1146 is a Cross-site Scripting (XSS) vulnerability in FlatPress prior to 1.3 (flatpressblog/flatpress). The issue is caused by unsanitized input, notably in the blog author parameter on admin.php?p=config, allowing an attacker to inject harmful scripts. Affected software is Flat...
CVE-2023-1146 Cross-site Scripting (XSS) - Generic in flatpressblog/flatpress
Cross-site Scripting XSS - Generic in GitHub repository flatpressblog/flatpress prior to 1.3...
MSC-2022-1146
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...