15 matches found
CVE-2026-26046
A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator coul...
CVE-2026-26046
A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator coul...
CVE-2026-26046
creationtimestamp| type| source ---|---|--- 2026-02-17 13:10:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mf2n76nw5322 2026-02-26 21:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfs5vis76a2m...
MAL-2025-26046 Malicious code in mcadvert (npm)
The package mcadvert was found to contain malicious code...
CVE-2024-26046 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...
CVE-2024-26046
CVE-2024-26046 affects Adobe Experience Manager up to version 6.5.19 (and earlier). It is a stored Cross‑Site Scripting (XSS) vulnerability where malicious JavaScript can be injected into vulnerable form fields and executed in a victim’s browser when visiting the affected page. Remediation: upgra...
CVE-2024-26046 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...
CVE-2023-26046
creationtimestamp| type| source ---|---|--- 2023-03-02 07:34:05+00:00| seen| https://t.me/cibsecurity/59306 2025-03-05 21:34:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6615...
CVE-2023-26046
CVE-2023-26046 affects kitabisa/teler-waf (Go HTTP middleware). Prior to v0.1.1, it fails to properly sanitize HTML entities in user input, enabling bypass of common web attack rules and enabling cross-site scripting (XSS) in a victim’s browser. Impact described across multiple sources includes a...
CVE-2023-26046 teler-waf subject to bypass of common web attack threat rule with HTML entities payload
teler-waf is a Go HTTP middleware that provides teler IDS functionality to protect against web-based attacks. In teler-waf prior to version 0.1.1 is vulnerable to bypassing common web attack rules when a specific HTML entities payload is used. This vulnerability allows an attacker to execute...
CVE-2021-26046
CVE-2021-26046 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2020-26046
creationtimestamp| type| source ---|---|--- 2021-01-05 19:25:23+00:00| seen| https://t.me/cibsecurity/21576...
CVE-2020-26046
FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors...
CVE-2020-26046
CVE-2020-26046 affects FUEL CMS 1.4.11. A stored cross-site scripting vulnerability exists in the Blocks/Navigation/Site variables, exploitable by an authenticated user and potentially impacting other visitors. Reported impact includes cookie stealing and other malicious actions. The available do...