1125518 matches found
WordPress CozyStay theme <= 1.10.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by G0053 in WordPress Theme CozyStay versions = 1.10.0...
CVE-2024-4367-POC-PDFJS
CVE 2024 4367: PoC per lo sfruttamento di XSS Cross-Site Scripting 1. Visualizzazione di un Avviso Attivazione XSS Un altro esempio di sfruttamento consiste nell'iniettare un semplice messaggio di avviso per verificare se l'attacco funziona. root@kitploit: python poc.py "alert'XSS exploit...
CVE-2025-51401
Exploit-Titel: LiveHelperChat =4.61 - Gespeichertes Cross-Site-Scripting XSS über das Operator-Chat-Namensfeld löst bei Übergabe des Chat-Besitzers aus Datum: 09/06/2025 Exploit-Autor: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Hersteller-Webseite:...
CVE-2025-70368
CVE-2025-70368 Vulnerabilidade de Cross-Site Scripting XSS Armazenado na Funcionalidade de Atualizações de Projeto...
CVE-2024-55060
CVE-2024-55060 Rafed CMS Website v1.44 - Cross Site Scripting XSS Titolo dell'exploit: Rafed CMS Website v1.44 - Cross Site Scripting XSS Data: 2024-03-12 CVE: CVE-2024-55060 Autore dell'exploit: Abdulaziz Saad @b4zb0z Homepage del fornitore: https://www.rafed-system.org/ Link del software: N/A...
CVE-2002-0346
CVE-2002-0346 Vulnerabilità di cross-site scripting in Cobalt RAQ 4 consente a un attaccante remoto di eseguire script arbitrari come altri utenti Cobalt tramite Javascript in un URL verso 1 service.cgi o 2 alert.cgi. Pubblicazione Packetstorm su...
CVE-2022-36432
CVE-2022-36432 Cross-site Scripting XSS nella funzionalità di anteprima in Amasty Blog Pro per Magento 2 Descrizione La funzionalità di anteprima nel plugin Amasty Blog Pro 2.10.3 per Magento 2 utilizza eval in modo non sicuro. Ciò consente agli aggressori di effettuare attacchi Cross-site...
WordPress Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Cozy Blocks versions = 2.2.16...
CVE-2026-56704
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
EUVD-2026-65202
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
CVE-2026-56704
Adminer versions before 5.4.3 are vulnerable to cross-site scripting (XSS) caused by unsanitized database server version strings being inserted into [removed] tags that carry valid CSP nonces. An attacker who controls a rogue MySQL server can return a crafted version string that breaks out of the...
CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
EUVD-2026-65176
Unauthenticated Cross Site Scripting XSS in Stripe Payments = 2.1.2 versions...
EUVD-2026-65170
Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...
EUVD-2026-65171
Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...
EUVD-2026-65163
Unauthenticated Cross Site Scripting XSS in Boost = 2.0.4 versions...
RHEL 9 : golang (RHSA-2026:57649)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57649 advisory. The golang packages provide the Go programming language compiler. Security Fixes: net/mail: golang: net/mail: Denial of Service via...