Lucene search
+L

89 matches found

Positive Technologies
Positive Technologies
•added 2026/05/17 12:00 a.m.•29 views

PT-2026-41717

CVE-2026-6050 - CVE-2019-11510 - Apache Struts Remote Code Execution CVE ID :CVE-2026-6050 Published : May 16, 2026, 11:16 p.m. | 1 hour, 58 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for...

10CVSS8.5AI score0.99999EPSS
SaveExploits24References1
attackerkb
attackerkb
•added 2026/05/16 10:30 p.m.•19 views

CVE-2026-6050

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

5.7AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-7256

Malicious code in bioql PyPI...

6.1CVSS5.4AI score0.00233EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/06/19 11:23 a.m.•21 views

CVE-2025-6050

Mezzanine CMS, in versions prior to 6.1.1, contains a Stored Cross-Site Scripting XSS vulnerability in the admin interface. The vulnerability exists in the "displayablelinksjs" function, which fails to properly sanitize blog post titles before including them in JSON responses served via...

4.8CVSS5.7AI score0.00315EPSS
SaveExploits1References1
vulnersOsv
vulnersOsv
•added 2025/06/17 12:31 p.m.•2 views

open-helpdesk (>=0.4.1, <=0.4.4) potentially affected by CVE-2025-6050 via mezzanine (3.1.10)

mezzanine PYPI version 3.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - open-helpdesk =0.4.1, =0.4.4 Source cves: CVE-2025-6050 Source advisory: OSV:GHSA-7PR5-W74R-JJJ7...

4.8CVSS0.00315EPSS
SaveExploits1
Circl
Circl
•added 2025/06/17 11:38 a.m.•41 views

CVE-2025-6050

creationtimestamp| type| source ---|---|--- 2025-06-17 11:38:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18580 2025-06-17 15:28:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrssoskvg62r...

4.8CVSS4.8AI score0.00315EPSS
SaveExploits1References2
vulnersOsv
vulnersOsv
•added 2025/06/17 11:15 a.m.•4 views

django-clubhouse (>=0.0.1, <=0.2.19) potentially affected by CVE-2025-6050 via mezzanine (4.1.0)

mezzanine PYPI version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - django-clubhouse =0.0.1, =0.2.19 Source cves: CVE-2025-6050 Source advisory: OSV:PYSEC-2025-236...

4.8CVSS0.00315EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2025/06/17 11:15 a.m.•2 views

open-helpdesk (>=0.4.1, <=0.4.4) potentially affected by CVE-2025-6050 via mezzanine (3.1.10)

mezzanine PYPI version 3.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on mezzanine and may be impacted: - open-helpdesk =0.4.1, =0.4.4 Source cves: CVE-2025-6050 Source advisory: OSV:PYSEC-2025-236...

4.8CVSS0.00315EPSS
SaveExploits1
CVE
CVE
•added 2025/06/17 11:06 a.m.•70 views

CVE-2025-6050

CVE-2025-6050 affects Mezzanine CMS versions before 6.1.1. The vulnerability is a Stored XSS in the admin interface caused by improper sanitization in the displayable_links_js path, where a blog post title containing malicious JavaScript is included in JSON responses served at /admin/displayable_...

4.8CVSS5.2AI score0.00315EPSS
SaveExploits1References3Affected Software1
osv_cve
osv_cve
•added 2025/06/17 11:06 a.m.•17 views

CVE-2025-6050 Stored Cross-Site Scripting (XSS) in Mezzanine CMS Admin Interface

Mezzanine CMS, in versions prior to 6.1.1, contains a Stored Cross-Site Scripting XSS vulnerability in the admin interface. The vulnerability exists in the "displayablelinksjs" function, which fails to properly sanitize blog post titles before including them in JSON responses served via...

4.8CVSS6AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2025/06/17 11:06 a.m.•34 views

CVE-2025-6050 Stored Cross-Site Scripting (XSS) in Mezzanine CMS Admin Interface

Mezzanine CMS, in versions prior to 6.1.1, contains a Stored Cross-Site Scripting XSS vulnerability in the admin interface. The vulnerability exists in the "displayablelinksjs" function, which fails to properly sanitize blog post titles before including them in JSON responses served via...

4.8CVSS0.00315EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/05/23 4:57 a.m.•34 views

CVE-2023-6050

The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not sanitise and escape various parameters and generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS6.1AI score0.0042EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2025/03/23 2:17 p.m.•35 views

CVE-2025-2597

Reflected Cross-Site Scripting XSS in ITIUM 6050 version 5.5.5.2-b3526 from Impact Technologies. This vulnerability could allow an attacker to execute malicious Javascript code via GET and POST requests to the ‘/index.php’ endpoint and injecting code into the ‘idsession...

6.1CVSS6.3AI score0.00233EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/03/21 12:15 p.m.•14 views

CVE-2025-2597

Reflected Cross-Site Scripting XSS in ITIUM 6050 version 5.5.5.2-b3526 from Impact Technologies. This vulnerability could allow an attacker to execute malicious Javascript code via GET and POST requests to the ‘/index.php’ endpoint and injecting code into the ‘idsession...

6.1CVSS5.9AI score0.00233EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/21 12:15 p.m.•23 views

CVE-2025-2597

Reflected Cross-Site Scripting XSS in ITIUM 6050 version 5.5.5.2-b3526 from Impact Technologies. This vulnerability could allow an attacker to execute malicious Javascript code via GET and POST requests to the ‘/index.php’ endpoint and injecting code into the ‘idsession...

6.1CVSS0.00233EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/21 11:50 a.m.•41 views

CVE-2025-2597 Reflected Cross-Site Scripting (XSS) vulnerability in ITIUM 6050

Reflected Cross-Site Scripting XSS in ITIUM 6050 version 5.5.5.2-b3526 from Impact Technologies. This vulnerability could allow an attacker to execute malicious Javascript code via GET and POST requests to the ‘/index.php’ endpoint and injecting code into the ‘idsession...

5.1CVSS0.00233EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/21 11:50 a.m.•25 views

CVE-2025-2597 Reflected Cross-Site Scripting (XSS) vulnerability in ITIUM 6050

Reflected Cross-Site Scripting XSS in ITIUM 6050 version 5.5.5.2-b3526 from Impact Technologies. This vulnerability could allow an attacker to execute malicious Javascript code via GET and POST requests to the ‘/index.php’ endpoint and injecting code into the ‘idsession...

5.1CVSS5.9AI score0.00233EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/21 11:50 a.m.•78 views

CVE-2025-2597

CVE-2025-2597 describes a reflected Cross-Site Scripting (XSS) vulnerability in Impact Technologies ITIUM 6050 (version 5.5.5.2-b3526 ). According to the sources, an attacker could execute arbitrary JavaScript by crafting GET/POST requests to the endpoint /index.php and injecting code via the par...

6.1CVSS6AI score0.00233EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/03/21 12:00 a.m.•15 views

Impact Technologies ITIUM 6050 跨站脚本漏洞

The Impact Technologies ITIUM 6050 is a versatile thin client from Impact Technologies, Inc. that meets the needs of organizations that use multimedia and video solutions on a daily basis and are looking for robust functionality and image quality, such as videoconferencing, video surveillance,...

6.1CVSS6.6AI score0.00233EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/21 12:00 a.m.•4 views

PT-2025-12415

Name of the Vulnerable Software and Affected Versions ITIUM 6050 version 5.5.5.2-b3526 Description This issue allows an attacker to execute malicious Javascript code via GET and POST requests to the "/index.php" endpoint and inject code into the id session. Recommendations For ITIUM 6050 version...

6.1CVSS0.00233EPSS
SaveExploits0References5
Rows per page
Query Builder