151 matches found
CVE-2026-21663: Improper Neutralization of Input During Web Page Generation
HackerOne community member Patrick Lang 7yr has reported a reflected XSS vulnerability in the banner-acl.php script of Revive Adserver. An attacker can craft a specific URL that includes an HTML payload in a parameter. If a logged in administrator visits the URL, the HTML is sent to the browser a...
CVE-2026-21642: Improper Neutralization of Input During Web Page Generation
HackerOne community member Patrick Lang 7yr has reported a reflected XSS vulnerability in the banner-acl.php and channel-acl.php scripts of Revive Adserver. An attacker can craft a specific URL that includes an HTML payload in a parameter. If a logged in administrator visits the URL, the HTML is...
CVE-2026-21664: Improper Neutralization of Input During Web Page Generation
HackerOne community member Huynh Pham Thanh Luc nigh7c0r3 has reported a reflected XSS vulnerability in the afr.php delivery script of Revive Adserver. An attacker can craft a specific URL that includes an HTML payload in a parameter. If a logged in administrator visits the URL, the HTML is sent ...
CVE-2023-49540
Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/history. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the history parameter...
CVE-2022-26565
A cross-site scripting XSS vulnerability in Totaljs all versions before commit 95f54a5commit, allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Name text field when creating a new page...
PT-2025-51099
ShineLan-X contains a stored cross site scripting XSS vulnerability in the Plant Name field. A HTML payload will be displayed on the plant management page via a direct post. This may allow attackers to force a legitimate user’s browser’s JavaScript engine to run malicious code...
CVE-2025-36750: Improper Neutralization of Input During Web Page Generation
ShineLan-X contains a stored cross site scripting XSS vulnerability in the Plant Name field. A HTML payload will be displayed on the plant management page via a direct post. This may allow attackers to force a legitimate user’s browser’s JavaScript engine to run malicious code...
EUVD-2020-18509
Malware in sbrugna...
EUVD-2020-18078
Malware in sbrugna...
EUVD-2020-18079
Malware in sbrugna...
EUVD-2020-15809
Malware in sbrugna...
EUVD-2021-17077
Malware in sbrugna...
EUVD-2022-47886
Malicious code in bioql PyPI...
EUVD-2023-34837
Malicious code in bioql PyPI...
EUVD-2022-46213
Malicious code in bioql PyPI...
EUVD-2022-30808
Malicious code in bioql PyPI...
EUVD-2023-52967
Malicious code in bioql PyPI...
EUVD-2023-46083
Malicious code in bioql PyPI...