34 matches found
SUSE CVE-2026-35540
An issue was discovered in Roundcube Webmail 1.6.0 before 1.6.14. Insufficient Cascading Style Sheets CSS sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts...
Fedora: Security Advisory (FEDORA-2026-051825ca18)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dsa-6196 : roundcube - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6196 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6196-1 [email protected] https://www.debian.org/securit...
[SECURITY] [DSA 6196-1] roundcube security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6196-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 04, 2026 https://www.debian.org/security/faq -...
Linux Distros Unpatched Vulnerability : CVE-2021-35540
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.28. Easily...
MAL-2025-35540 Malicious code in test-mlw2-huffy-chewy-algae-piccy (npm)
The package test-mlw2-huffy-chewy-algae-piccy was found to contain malicious code...
CVE-2024-35540
A stored cross-site scripting XSS vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2022-35540
Hardcoded JWT Secret in AgileConfig 1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access...
📄 Typecho 1.3.0 Cross Site Scripting
Typecho versions 1.3.0 and below suffer from a persistent cross site scripting vulnerability. // Exploit Title: Typecho = 1.3.0 Stored Cross-Site Scripting XSS // Google Dork: intext:"Powered by Typecho" inurl:/index.php // Date: 18/08/2024 // Exploit Author: Michele 'cyberaz0r' Di Bonaventura //...
Typecho 1.3.0 - Stored Cross-Site Scripting (XSS)
Exploit Title: Typecho 1.3.0 - Stored Cross-Site Scripting XSS Google Dork: intext:"Powered by Typecho" inurl:/index.php Date: 18/08/2024 Exploit Author: Michele 'cyberaz0r' Di Bonaventura Vendor Homepage: https://typecho.org Software Link: https://github.com/typecho/typecho Version: 1.3.0 Tested...
CVE-2024-35540
creationtimestamp| type| source ---|---|--- 2024-08-20 17:58:39+00:00| seen| https://t.me/cvedetector/3665 2024-09-10 04:24:15+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8295 2025-04-11 21:02:20+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lmkw4brjyh2c...
CVE-2024-35540
A stored cross-site scripting XSS vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2024-35540
A stored cross-site scripting XSS vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2024-35540
Typecho 1.3.0 (and earlier) is affected by a stored XSS vulnerability in the post writing/preview flow (CVE-2024-35540). An attacker with post writing privileges can inject arbitrary JavaScript/HTML via a crafted payload, potentially compromising user sessions or data. Evidence across multiple so...
CVE-2024-35540
A stored cross-site scripting XSS vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2022-35540
creationtimestamp| type| source ---|---|--- 2022-08-19 02:23:12+00:00| seen| https://t.me/cibsecurity/48421...
CVE-2022-35540
Hardcoded JWT Secret in AgileConfig 1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access...
CVE-2022-35540
CVE-2022-35540 concerns AgileConfig prior to 1.6.8 where a hard-coded JWT secret in the server enables remote attackers to forge a token and gain administrator access. The issue, documented across multiple sources (Red Hat, GHSA, OSV, NVD), attributes the root cause to an inline secret, allowing ...