1126654 matches found
WordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by LevinityCyber in WordPress Plugin Bold Page Builder versions = 5.9.9...
WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin Simple Payment versions = 2.5.4...
WSO2-2021-1261
WSO2-2021-1261: WSO2 ESB における複数のクロスサイトスクリプティング 不適切な出力エンコーディングにより、WSO2 ESB で複数のクロスサイトスクリプティング XSS 攻撃が確認されました。 ベンダー開示： この脆弱性に関するベンダーの開示と修正は こちら で確認できます。 なぜ CVE がないのか？ 私もベンダーも、この脆弱性の CVE を申請しませんでした。 要件： この脆弱性には以下が必要です： 一部の XSS では、有効なユーザー資格情報が必要です。 概念実証： 詳細と悪用プロセスは、この PDF で確認できます。...
EUVD-2026-75969
The Featured Image with URL WordPress plugin before 1.0.6 does not sanitise and escape a stored image attribute value before outputting it, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the...
WordPress AI Builder plugin 2.4.1-2.7.7 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by md. minaruzzaman shovon in WordPress Plugin AI Builder versions 2.4.1-2.7.7...
CVE-2023-37191
CVE-2023-37191 — Issabel PBX 4.0.0-6: Stored Cross-Site Scripting XSS Overview...
sudowp-hooks-visualizer
SudoWP Hooks Visualizer Contributors: SudoWP, WP Republic Original Authors: Stuart O'Brien, cxThemes Tags: hooks, actions, filters, developer-tool, debug, security-fork, cve-2024-6297 Requires at least: 5.8 Tested up to: 6.7 Stable tag: 1.3.2 License: GPLv2 or later Security Notice CVE-2024-6297...
Openemr < 7.0.0.1 - Cross-Site Scripting
Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1. id: CVE-2022-2733 info: name: Openemr 7.0.0.1 - Cross-Site Scripting author: ctflearner severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to...
CVE-2026-21013-PDF-JavaScript-Injection-via-Embedded-Script
CVE-2026-21013 – 通过嵌入式脚本实现的 PDF JavaScript 注入 程序代码（生成恶意 PDF 的 Python 脚本） root@kitploit: generatepdfjsinject.py - Creates a PDF with embedded JavaScript pdf = b"""%PDF-1.7 1 0 obj endobj trailer %%EOF """ with open"malicious.pdf", "wb" as f: f.writepdf print"malicious.pdf created. When opened in a...
CVE-2023-33731
CVE-2023-33731 — eScan Management Console: Reflected Cross-Site Scripting XSS -orange Table of Contents Overview Vulnerability Details Severity & CVSS Score Affected Product Technical Analysis Proof of Concept Impact Mitigation & Remediation Disclosure Timeline...
1CRM-CVE
1CRM-CVE 1CRM ソフトウェアの脆弱性 脆弱性リスト CVE-2019-14221: 格納型クロスサイトスクリプティング...
hackazon
Hackazon Hackazonは、無料で利用可能な脆弱性のあるテストサイトであり、現代のリッチクライアントやモバイルアプリケーションで使用されているものと同じテクノロジーで構築されたオンラインストアフロントです。HackazonはAJAXインターフェース、厳格なワークフロー、およびコンパニオンモバイルアプリで使用されるRESTful APIを備えており、ITセキュリティ専門家にとって独自に効果的なトレーニングおよびテスト環境を提供します。そして、SQLインジェクション、クロスサイトスクリプティングなど、お気に入りの脆弱性が満載です。...
xss-payload-list
xss-payload-list 🎯 クロスサイトスクリプティング XSS 脆弱性ペイロードリスト...
WBCE-CMS-Stored-XSS---Pages-Menu
WBCE CMS 存储型 XSS v1.6.1 作者：Sergio 描述： WBCE CMS 1.6.1 存在跨站存储型脚本（XSS）漏洞，攻击者可通过在 Pages 菜单的 Intro Page 参数中精心构造的有效载荷来执行任意代码。该有效载荷将在主页上执行，且与用户会话无关，因此使用另一个用户访问首页时同样会执行该有效载荷。 POC： 登录面板后，我们将转到 Pages 中的“Modify Intro Page”部分 http://localhost/wbce/wbce/admin/pages/index.php 我们编辑 body 配置并在其中添加 XSS 有效载荷： XSS...
RockyLinux 10 : osbuild-composer (RLSA-2026:66432)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:66432 advisory. golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821...
RHEL 10 : osbuild-composer (RHSA-2026:66432)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66432 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...
Microsoft Edge (Chromium) < 151.0.4129.107 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.107. It is, therefore, affected by multiple vulnerabilities as referenced in the September 11, 2026 advisory. - Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft...
MiracleLinux 9 : opentelemetry-collector-0.152.1-2.el9_8 (AXSA:2026-1812:05)
The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1812:05 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service...
Skype for Business (September 2026)
The Microsoft Skype for Business installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network. CVE-2026-66302 -...
