CVE-2026-105708 imgproxy SVG svg.go sanitizeElement cross site scripting

A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component SVG Handler. Executing a manipulation can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has...

CVE-2026-105708

A flaw in the SVG Handler component of imgproxy (versions up to 4.0.17 ) allows for Cross-Site Scripting (XSS) . The vulnerability exists in the sanitizeElement function within the processing/svg/svg.go file. This flaw can be triggered via a remote manipulation attack. While the exploit has been ...

[SECURITY] [DSA 6545-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6545-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 06, 2026 https://www.debian.org/security/faq -...

CVE-2026-105705

The SourceCodester Drug Recommendation System 1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw via an unknown function in the Admin/add_drug.php file. This vulnerability allows for remote manipulation resulting in XSS. The documents indicate that an exploit has been released to the public a...

CVE-2026-105705 SourceCodester Drug Recommendation System add_drug.php cross site scripting

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...

CVE-2026-105705 SourceCodester Drug Recommendation System add_drug.php cross site scripting

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...

Cisco ASA/FTD Software - Cross-Site Scripting

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are vulnerable to cross-site scripting and could allow an unauthenticated, remote attacker to conduct attacks against a user of the web services interface of an affected device. The vulnerabilities are...

Cisco ASA Inconsistent Interpretation of HTTP Requests (CVE-2022-20713)

A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct browser-based attacks against users of an affected device. This vulnerability is du...

Cisco ASA Cross-site Scripting (CVE-2024-20341)

A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a browser that is accessing an affected...

RHCOS 4 : Red Hat build of MicroShift 4.21.36 (RHSA-2026:74796)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74796 advisory. - encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 - mime: golang:...

Cisco ASA Cross-site Scripting (CVE-2019-12695)

A vulnerability in the Clientless SSL VPN WebVPN portal of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web- based management interface of an...

SUSE SLES15 Security Update : rubygem-rails-html-sanitizer (SUSE-SU-2026:4445-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4445-1 advisory. This update for rubygem-rails-html-sanitizer fixes the following issue: - CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when t...

Cisco ASA Cross-site Scripting (CVE-2020-3580)

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the web services interface of an...

CVE-2026-105705: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...

CVE-2026-105111: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Commons BCEL. This only happens when you're using Class2HTML to generate webpages for possibly-attacker-controlled class files, where Class2HTML emitters write attacker class-file strings in...

CVE-2026-42634: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Video Background Block – Use video as background in the section. = 2.0.3 versions...

PT-2026-106390

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Student Information System version 1.0 Description Cross site scripting can occur via remote execution when the searchbox argument is manipulated. This issue affects the clean function within the searchresults.php file...

PT-2026-106795

Name of the Vulnerable Software and Affected Versions Payload versions prior to 3.90.0 Payload canary versions prior to 4.0.0-canary.34 Description A collection that allows downloadable SVG uploads can store a malicious SVG file. This file can bypass sanitization, allowing the execution of...

PT-2026-106392

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.2...

Cisco ASA/FTD Cross-site Scripting (CVE-2020-3582)

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the web services interface of an...