1125281 matches found
CVE-2019-10092
CVE-2019-10092: Cross-Site Scripting limitato tramite pagina "Proxy Error" in Apache HTTP Server In Apache HTTP Server 2.4.0-2.4.39, è stato segnalato un problema di cross-site scripting limitato che interessava la pagina di errore di modproxy. Un aggressore potrebbe causare la deformazione del...
CVE-2026-11747
Seres Software syWEB is affected by a Reflected XSS vulnerability caused by improper neutralization of user-supplied input during web page generation. The flaw affects versions through 27082026 . An attacker who lures a user into a crafted link can execute script in the victim's context, with a c...
CVE-2026-11747 Reflected XSS in Seres Software's syWEB
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...
EUVD-2026-67134
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...
CVE-2020-3580
CVE-2020-3580 Zusätzliche Exploits für XSS in Cisco ASA-Geräten, entdeckt von PTSwarm Verwendung Stage Adresse ändern Demonstrieren Anmelden bei Cisco ASA WebVPN Besuchen Sie die bereitgestellte schädliche Seite Stellen Sie Ihre Anmeldedaten wieder her Patchen ; Beispiel / Ergebnis...
EUVD-2026-67131
Affected versions of Flowintel construct timeline HTML using attacker-controllable MISP object fields such as: object UUID; object name; attribute value; attribute type; comment; first/last seen values; IDS flag. Those values were concatenated directly into HTML strings before rendering. The...
CVE-2022-43332
CVE-2022-43332 Cross Site Scripting in WonderCMS Descrizione: Una vulnerabilità di cross-site scripting XSS in Wondercms v3.3.4 consente a potenziali attaccanti di eseguire script web arbitrari o HTML tramite un payload appositamente creato iniettato nel campo Site title del Pannello di...
CVE-2022-3942
CVE-2022-3942 Cross Site Scripting in Sanitization Management System Descrizione: Una vulnerabilità di cross-site scripting XSS in Sanitization Management System v1.0 consente a potenziali attaccanti di eseguire script web o HTML arbitrari tramite un payload appositamente predisposto iniettato ne...
CVE-2026-5218
Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting XSS. This issue affects E-Commerce Pack: before 5.03.01.49...
EUVD-2026-67126
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in BilPark Informatics Technologies Industry and Trade Inc. DoXBASE allows Cross Zone Scripting. This issue affects DoXBASE: through 27082026. NOTE: The vendor was contacted early about this disclosur...
golang security, bug fix, and enhancement update
An update is available for golang. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...
CVE-2026-73426
A flaw was found in Trix, a rich text editor. An attacker can exploit a cross-site scripting XSS vulnerability by crafting malicious HTML with a data-trix-serialized-attributes attribute. This attribute can bypass the DOMPurify sanitizer, allowing the execution of arbitrary JavaScript in a user's...
CVE-2026-75838
A flaw was found in DOMPurify. This cross-site scripting vulnerability occurs during INPLACE sanitization, where element-removal hooks fail to neutralize detached subtrees. A remote attacker can exploit this by supplying specially crafted HTML with event handlers. This allows the execution of...
CVE-2023-41425
CVE-2023-41425 Descrizione Una vulnerabilità di Cross Site Scripting in WonderCMS dalla versione 3.2.0 alla versione 3.4.2 consente a un attaccante remoto di eseguire codice arbitrario tramite uno script modificato caricato nel componente installModule. Questa è una versione modificata dell'explo...
CVE-2015-9251
CVE-2015-9251 Dieses Repository enthält einen Proof of Concept PoC für CVE-2015-9251, eine Sicherheitslücke in jQuery-Versionen vor 3.0.0, die es Angreifern unter bestimmten Bedingungen ermöglicht, Cross-Site Scripting XSS-Angriffe durchzuführen...
Bootstrap-with-XSS
Raccolta di PoC per vulnerabilità storiche di Bootstrap Questa è una pagina HTML statica per scopi di studio e ricerca, che integra molteplici proof of concept PoC di vulnerabilità cross-site scripting XSS nella storia del framework Bootstrap. Questo progetto ha lo scopo di fornire a ricercatori ...
CVE-2026-73427
A flaw was found in Trix, a rich text editor. A remote attacker could exploit this vulnerability by convincing a victim to drag and drop a specially crafted JSON payload into an editor using the Level0InputController. This could bypass sanitization and allow the injection of executable JavaScript...
vulnerabilities present in Microsoft Office
Microsoft has identified vulnerabilities in various Office products. A malicious individual can exploit these vulnerabilities to carry out attacks that can cause damage as described in the following table. For successful exploitation, the malicious individual must deceive the victim into opening ...