13 matches found
CVE-2026-27087
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in G5Theme Wolverine Framework wolverine-framework allows Reflected XSS.This issue affects Wolverine Framework: from n/a through = 1.9...
CVE-2026-27087
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in G5Theme Wolverine Framework wolverine-framework allows Reflected XSS.This issue affects Wolverine Framework: from n/a through = 1.9...
MAL-2025-27087 Malicious code in nathcorp (npm)
The package nathcorp was found to contain malicious code...
CVE-2024-27087
Kirby is a content management system. The new link field introduced in Kirby 4 allows several different link types that each validate the entered link to the relevant URL format. It also includes a "Custom" link type for advanced use cases that don't fit any of the pre-defined link formats. As th...
CVE-2023-27087
Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter...
CVE-2025-27087
A vulnerability in the kernel of the Cray Operating System COS could allow an attacker to perform a local Denial of Service DoS attack...
CVE-2025-27087
creationtimestamp| type| source ---|---|--- 2025-04-22 21:54:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114383837388549905 2025-04-22 22:04:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12994 2025-04-23 01:14:37+00:00| seen|...
CVE-2024-27087
Kirby 4 introduces a link field with a Custom type that can accept javascript: URLs. This leads to cross-site scripting (XSS) when unvalidated Custom links are rendered and clicked by users. The vulnerability stems from insufficient sanitization/validation of Custom links, enabling arbitrary Java...
CVE-2024-27087 Kirby cross-site scripting (XSS) in the link field "Custom" type
Kirby is a content management system. The new link field introduced in Kirby 4 allows several different link types that each validate the entered link to the relevant URL format. It also includes a "Custom" link type for advanced use cases that don't fit any of the pre-defined link formats. As th...
CVE-2023-27087
creationtimestamp| type| source ---|---|--- 2023-03-21 21:35:02+00:00| seen| https://t.me/cibsecurity/60402...
CVE-2023-27087
Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter...
CVE-2023-27087
Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter...
CVE-2023-27087
The CVE-2023-27087 vulnerability affects Xuxueli XXL-JOB (versions 2.2.0, 2.3.0, 2.3.1). It allows an attacker to read sensitive information through the pageList parameter due to a lack of proper input sanitization. Documented impact is information disclosure with a high confidentiality impact (C...