2096 matches found
OpenNebula-CVE-2025-56534
OpenNebula-CVE-2025-56534 Titolo Exploit : OpenNebula 6.10.0.1 - XSS persistente Cross-site Scripting nel driver di autenticazione personalizzato Autore Exploit : Mark Artamonov Homepage del fornitore : https://opennebula.io/ Versione testata : OpenNebula 6.10.0.1 Versioni interessate : OpenNebul...
CVE-2026-78238
SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...
CVE-2022-42889-text4shell
CVE-2022-42889 alias text4shell PoC per la vulnerabilità scoperta di recente in Apache Commons Text di @pwntester: La vulnerabilità risiede nell'oggetto interpolatore StringSubstitutor. Un interpolatore viene creato dal metodo StringSubstitutor.createInterpolator e consente ricerche di stringhe...
CVE-2026-77838
SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...
EUVD-2026-67577
SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...
Mitel ShoreTel 19.46.1802.0 Devices - Cross-Site Scripting
Mitel ShoreTel 19.46.1802.0 devices and their conference component are vulnerable to an unauthenticated attacker conducting reflected cross-site scripting attacks via the PATHINFO variable to index.php due to insufficient validation for the timezone object in the HOMEMEETING& page. id:...
CVE-2024-39248
Titolo Exploit: SimpCMS v0.1 - Cross Site Scripting XSS CVE: CVE-2024-39248 Autore Exploit: Jason Jacobs 0xjasonjacobs - Twitter Homepage del fornitore: https://sourceforge.net/projects/simpcms/ Endpoint vulnerabile: /SimpCMS/admin.php Una vulnerabilità di cross-site scripting XSS in SimpCMS v0.1...
CVE-2023-49987
CVE-2023-49987 School Fees Management System v1.0 - Vulnerabilità Cross-Site Scripting XSS nel parametro "tname" su "newterm" Descrizione : Una vulnerabilità di cross-site scripting XSS nel componente "newterm" di School Fees Management System 1.0 consente a un utente malintenzionato di eseguire...
CVE-2023-49986
CVE-2023-49986 School Fees Management System v1.0 - Vulnerabilidade de Cross-Site Scripting XSS no parâmetro "name" em "addnewparent" Description : Uma vulnerabilidade de cross-site scripting XSS no componente “addnewparent” do School Fees Management System 1.0 permite que atacantes executem...
CVE-2023-49984
CVE-2023-49984 स्कूल फीस प्रबंधन प्रणाली v1.0 - "/management/settings" पर "name" फ़ील्ड/पैरामीटर में क्रॉस-साइट स्क्रिप्टिंग XSS कमजोरी विवरण : School Fees Management System v1.0 के "/management/settings" घटक में एक क्रॉस-साइट स्क्रिप्टिंग XSS कमजोरी हमलावरों को name पैरामीटर में इंजेक्ट किए गए ए...
CVE-2023-49983
CVE-2023-49983 School Fees Management System v1.0 - Vulnerabilità Cross-Site Scripting XSS nel campo/parametro "name" su "/management/class" Descrizione : Una vulnerabilità di cross-site scripting XSS nel componente "/management/class" di School Fees Management System v1.0 consente a un attaccant...
EUVD-2026-63826
Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component WebView running on the affected product, resulting in the displayed content being altered...
CVE-2026-76352
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could create or modify a scripted lookup through generic configuration endpoints and run an installed lookup script with the permissions of the user account running...
CVE-2026-20232
A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...
CVE-2026-72529
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function...
CVE-2026-20232
The web-based management interface of Cisco IE 1000 Series Switches fails to validate user-supplied input, enabling an authenticated attacker to inject malicious script into specific pages that executes in another user's session (stored XSS). CVSS 5.4 (MEDIUM) requires valid credentials and user ...
Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...
CVE-2026-66358
A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script...