PT-2026-91080

Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82767: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2023-28148

A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520...

SAP Business One Resource Management XSS

The vulnerability of SAP Business One’s resource management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

RHEL 9 : delve (RHSA-2026:67313)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67313 advisory. Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go...

RHEL 9 : image-builder (RHSA-2026:67138)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67138 advisory. A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fixes:...

Linux Distros Unpatched Vulnerability : CVE-2025-56535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross-site scripting XSS vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into...

CVE-2023-28148

Paessler PRTG Network Monitoring is affected by a bodyclass Cross-Site Scripting (XSS) vulnerability in versions prior to 23.3.86.1520 . The vulnerability allows an attacker to inject scripts via the body class parameter, with a CVSS 3.1 score of 7.2 (HIGH) (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N), ...

PT-2026-91075

Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2023-51769

Frappe before 14.49.0 is vulnerable to a Cross-Site Scripting (XSS) attack that affects blog pages and exception pages . The CVSS 3.1 score is 6.1 (MEDIUM) , with a network attack vector, low complexity, no privileges required, but user interaction required , and a changed scope leading to low im...

CVE-2023-28148

A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520...

PT-2026-91077

Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

PT-2026-91073

Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

Medium: jsoup

Issue Overview: jsoup is a Java library for working with real-world HTML. From 1.14.3 until 1.23.1, jsoup's HTML parser could incorrectly handle a malformed tag name ending in a control character, causing the tag to acquire the parsing behavior of a different element. When a custom Safelist permi...

PT-2026-91025

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description A remote cross-site scripting issue exists in the /subject1.php file. This occurs when the subject argument is manipulated, allowing an attacker to execute scripts in the...

CVE-2026-82796: Improper Neutralization of Input During Web Page Generation

SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

PT-2026-91763

Name of the Vulnerable Software and Affected Versions michaelliao itranswarp versions prior to 2.20 Description A flaw in the Page Content Rendering component allows remote attackers to perform cross site scripting XSS, which is a technique used to inject malicious scripts into web pages viewed b...

CVE-2026-86898: Improper Neutralization of Input During Web Page Generation

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting...

PT-2026-91100

SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-90835: Improper Neutralization of Input During Web Page Generation

A flaw has been found in michaelliao itranswarp up to 2.19. The impacted element is the function Markdown.toHtml of the file Markdown.java of the component Page Content Rendering. This manipulation causes cross site scripting. The attack may be initiated remotely. The exploit has been published a...