https-nj.gov---CVE-2019-8331

https-nj.gov---CVE-2019-8331 Report di vulnerabilità del sito ufficiale del New Jersey Bootstrap 4.0.0 Trovato in https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js Informazioni sulla vulnerabilità: Media 28236 XSS nelle proprietà data-template, data-content e data-title di...

CVE-2024-29399

Dettagli della vulnerabilità CVE-2024-29399 Panoramica In Savane v3.13 e versioni precedenti, la mancanza di validazione dei file caricati può consentire l'escalation dei privilegi. I server web configurati secondo le istruzioni di installazione sono vulnerabili a Cross-Site Scripting XSS. In...

CVE-2024-52318

CVE-2024-52318 🚨🚨CVE-2024-52318 - Vulnerabilità XSS in JSP Generate in Apache Tomcat🚨🚨 Panoramica CVE-2024-52318 è una vulnerabilità di cross-site scripting XSS in Apache Tomcat, che deriva dal rilascio improprio di risorse nelle JavaServer Pages JSP generate. Questo problema, introdotto da un...

cve-2020-11023-demonstration

Jquery XSS - CVE-2020-11023 Questa è una dimostrazione della riproduzione di CVE-2020-11023. La fonte proviene principalmente da questo articolo del blog. Riproduzione Installa le dipendenze npm con npm install, jQuery 3.4.1 è incluso come dipendenza. Esegui il progetto con, ad esempio, live serv...

CVE-2023-29489

CVE-2023-29489 Scansione di massa della vulnerabilità in Cpanel XSS KALI LINUX sudo pip install BeautifulSoup sudo pip install shodan sudo pip install pystyle git clone https://github.com/0-d3y/CVE-2023-29489.git cd CVE-2023-29489 python cve202329489.py TERMUX pkg install BeautifulSoup pkg instaa...

CVE-2022-31299

CVE-2022-31299 Haraj Script 3.7 - Reflektiertes XSS Exploit-Titel: Haraj Script 3.7 - Reflektiertes XSS Datum: 2022-06-13 CVE: CVE-2022-31299 Exploit-Autor: Abdulaziz Saad @b4zb0z Anbieter-Startseite: https://angtech.org/ Software-Link: https://angtech.org/product/view/3 Version: 3.7...

Limbas-4.3.36.1319-is-vulnerable-to-Cross-Site-Scripting-XSS-

Limbas-4.3.36.1319 è vulnerabile a Cross Site Scripting XSS DESCRIZIONE Limbas 4.3.36.1319 è vulnerabile a Cross Site Scripting XSS LIMBAS http://www.limbas.org/ - 4.3.36.1319 PROVA DI CONCETTO UPDATE/up20.php la pagina riflette il codice XSS ESEMPIO DI PAYLOAD 1'"&% DETTAGLI XSS Cross-site...

XSS-Payloads

Dieses Repository hat keine README-Datei...

golang security update

An update is available for golang. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...

RLSA-2026:22120 Important: golang security update

The golang packages provide the Go programming language compiler. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass due to checksum validation flaw via malicious module proxy...

RLSA-2026:22121 Important: golang security update

The golang packages provide the Go programming language compiler. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass due to checksum validation flaw via malicious module proxy...

golang security update

An update is available for golang. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...

RLSA-2026:22112 Important: go-toolset:rhel8 security update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass due to checksum...

go-toolset:rhel8 security update

An update is available for golang, module.golang, module.delve, delve. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset provides the Go programming...

RHEL 9 : golang (RHSA-2026:60304)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60304 advisory. The golang packages provide the Go programming language compiler. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Servic...

CVE-2026-39275

Cockpit CMS versions ≤ 2.13.5 are affected by a stored XSS (CWE-79) in the item.php, field-select.js, and tags.js components. Field render() outputs are passed to Vue's v-html directive without output encoding , allowing a low-privilege editor to inject a persistent payload that fires for every a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093171 advisory. GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against...

RockyLinux 8 : go-toolset:rhel8 (RLSA-2026:60305)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:60305 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial o...

RockyLinux 8 : go-toolset:rhel8 (RLSA-2026:22112)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:22112 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass...

RockyLinux 10 : golang (RLSA-2026:22120)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:22120 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass...