356 matches found
CVE-2023-49977
CVE-2023-49977 Customer Support System 1.0 - 在 “customerlist” 页面的 “Address” 字段/参数中存在跨站脚本（XSS）漏洞 描述 : Customer Support System 1.0 存在存储型 XSS 漏洞。Customer Support System 1.0 版本中存在 XSS 漏洞。恶意行为者可以在编辑/创建客户时，通过 “Address” 字段/参数插入 JavaScript 代码。只要访问 “/customersupport/index.php?page=customerlist” 页面，该代码就会被执...
CVE-2022-25064
CVE-2022-25064 TP-LINK TL-WR840N 通过函数 oalwan6setIpAddr 实现 RCE POC POST /cgi?2&2&2 HTTP/1.1 Host: 192.168.0.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:95.0 Gecko/20100101 Firefox/95.0 Accept: / Accept-Language: es-ES,es;q=0.8,en-US;q=0.5,en;q=0.3 Accept-Encoding: gzip, deflate...
CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS
CVE-2021-27190 - PEEL Shopping, carrito de compras de comercio electrónico - Vulnerabilidad de Cross-Site Scripting Almacenado en 'Dirección' Fecha 2021-02-11 Autor del Exploit Anmol K Sachan Página del proveedor https://www.peel.fr/ Enlace del software...
CVE-2026-21877
CVE-2026-21877 CVE-2026-1357 的实验室环境 1. 构建环境 sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Link of Repo sudo chmod +x networkmonitor.py sudo docker compose up --build -d Firefox： http://localhost:5678 测试工作流： "address": "8.8.8.8" 已发布 .. 2...
CVE-2026-88742
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...
EUVD-2026-79298
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...
CVE-2026-88742
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...
CVE-2026-88742
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...
CVE-2026-88742
Bacularis versions 1.0.0 through 6.5.0 are vulnerable to Stored cross-site scripting (XSS) . The vulnerability exists within the client address field , where improper neutralization of input during web page generation allows for script injection. Exploitation details are not provided in the docum...
CVE-2026-88742: Improper Neutralization of Input During Web Page Generation
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...
CVE-2025-29277
CVE-2025-29277 Prova di concetto PoC: Nella scheda Diagnostics, accedi allo strumento Ping6 e, nel campo Host Address, inserisci un host valido seguito da un punto e virgola ; e dal comando desiderato. Per esempio: root@kitploit: example.com;id Descrizione: L'invio del payload sopra indicato allo...
CVE-2025-29276
CVE-2025-29276 Beweis des Konzepts PoC: Im Reiter 'Diagnose' rufen Sie das Ping-Tool auf und fügen Sie im Feld 'Host-Adresse' die folgende XSS-Nutzlast ein: root@kitploit: alert1 Beschreibung: Das direkte Absenden der Nutzlast im Feld 'Host-Adresse' löst eine reflektierte Cross-Site Scripting...
Linux Distros Unpatched Vulnerability : CVE-2026-68470
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: validate extension-frame layout before RX Extension frames only have the extension header at the regular 802.11 header offset. The generic RX pa...
CVE-2026-24329
CVE-2026-24329 : A flaw in wildfly-core allows a remote user authenticated as an administrator to inject a malformed payload into the Inet Address field via the Management Model. This causes the server to crash and become unrecoverable because the payload is written into standalone.xml, resulting...
CVE-2026-15920
A flaw was found in Django. The django.contrib.admin.utils.displayforfield function renders URLField values as clickable links in the administrative interface without proper validation. If an application persists URLField data containing an unsafe scheme without running model validation, a remote...
CVE-2026-15920
Django 5.2 before 5.2.17 and 6.0 before 6.0.8 are affected by a cross-site scripting issue in django.contrib.admin.utils.display_for_field() that renders URLField values as clickable links without validating the URL. If an unsafe URL is already stored (e.g., via direct queryset writes, deserializ...
Linux Distros Unpatched Vulnerability : CVE-2026-15920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.contrib.admin.utils.displayforfield renders URLField values as clickable links ...
CVE-2025-65337
Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...
