356 matches found
CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS
CVE-2021-27190 - PEEL Shopping, panier d'achat eCommerce - Vulnérabilité de Cross-Site Scripting stocké dans 'Adresse' Date 2021-02-11 Auteur de l'exploit Anmol K Sachan Page d'accueil du fournisseur https://www.peel.fr/ Lien du logiciel https://www.peel.fr/nos-offres-1/peel-shopping-31.html...
CVE-2023-49977
CVE-2023-49977 Customer Support System 1.0 - Vulnérabilité de Cross-Site Scripting XSS dans le champ/paramètre 'Address' sur la page 'customerlist' Description : Customer Support System 1.0 est vulnérable à une XSS stockée. Une vulnérabilité XSS existe dans la version 1 du Customer Support System...
CVE-2022-25064
CVE-2022-25064 TP-LINK TL-WR840N RCE via la fonction oalwan6setIpAddr POC POST /cgi?2&2&2 HTTP/1.1 Host: 192.168.0.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:95.0 Gecko/20100101 Firefox/95.0 Accept: / Accept-Language: es-ES,es;q=0.8,en-US;q=0.5,en;q=0.3 Accept-Encoding: gzip,...
CVE-2026-21877
CVE-2026-21877 CVE-2026-1357 실습 환경 1. 환경 구축 sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Link of Repo sudo chmod +x networkmonitor.py sudo docker compose up --build -d Firefox : http://localhost:5678 테스트 워크플로: "address": "8.8.8.8" 게시됨 .. 2...
CVE-2026-88742
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...
CVE-2026-88742
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...
CVE-2026-88742
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...
CVE-2026-88742
Bacularis versions 1.0.0 through 6.5.0 are vulnerable to Stored cross-site scripting (XSS) . The vulnerability exists within the client address field , where improper neutralization of input during web page generation allows for script injection. Exploitation details are not provided in the docum...
EUVD-2026-79298
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...
CVE-2026-88742: Improper Neutralization of Input During Web Page Generation
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...
CVE-2025-29277
CVE-2025-29277 Prova di concetto PoC: Nella scheda Diagnostics, accedi allo strumento Ping6 e, nel campo Host Address, inserisci un host valido seguito da un punto e virgola ; e dal comando desiderato. Per esempio: root@kitploit: example.com;id Descrizione: L'invio del payload sopra indicato allo...
CVE-2025-29276
CVE-2025-29276 Beweis des Konzepts PoC: Im Reiter 'Diagnose' rufen Sie das Ping-Tool auf und fügen Sie im Feld 'Host-Adresse' die folgende XSS-Nutzlast ein: root@kitploit: alert1 Beschreibung: Das direkte Absenden der Nutzlast im Feld 'Host-Adresse' löst eine reflektierte Cross-Site Scripting...
Linux Distros Unpatched Vulnerability : CVE-2026-68470
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: validate extension-frame layout before RX Extension frames only have the extension header at the regular 802.11 header offset. The generic RX pa...
CVE-2026-24329
CVE-2026-24329 : A flaw in wildfly-core allows a remote user authenticated as an administrator to inject a malformed payload into the Inet Address field via the Management Model. This causes the server to crash and become unrecoverable because the payload is written into standalone.xml, resulting...
CVE-2026-15920
A flaw was found in Django. The django.contrib.admin.utils.displayforfield function renders URLField values as clickable links in the administrative interface without proper validation. If an application persists URLField data containing an unsafe scheme without running model validation, a remote...
CVE-2026-15920
Django 5.2 before 5.2.17 and 6.0 before 6.0.8 are affected by a cross-site scripting issue in django.contrib.admin.utils.display_for_field() that renders URLField values as clickable links without validating the URL. If an unsafe URL is already stored (e.g., via direct queryset writes, deserializ...
Linux Distros Unpatched Vulnerability : CVE-2026-15920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. django.contrib.admin.utils.displayforfield renders URLField values as clickable links ...
CVE-2025-65337
Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting XSS in pageEditMember.php via the address field...
