Lucene search
+L

6 matches found

Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•29 views

PT-2026-57842

Rejetto HFS 3.0.0 through 3.2.0 renders log entries in the administration panel as HTML without sanitization. A remote unauthenticated attacker can submit a failed login with a crafted username that is written to the error log and executes JavaScript in an administrator's browser when the logs ar...

6.1CVSS6.3AI score0.00419EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/02/26 12:30 p.m.•22 views

EUVD-2025-208119

Improper neutralization of input in Checkmk versions 2.4.0 before 2.4.0p22, and 2.3.0 before 2.3.0p43 allows an attacker that can manipulate a host's check output to inject malicious JavaScript into the Synthetic Monitoring HTML logs, which can then be accessed via a crafted phishing link...

7.3CVSS5.4AI score0.00147EPSS
SaveExploits1References2
CVE
CVE
•added 2026/02/26 10:26 a.m.•53 views

CVE-2025-64999

The CVE-2025-64999 entry concerns Checkmk products: affected versions are 2.4.0 prior to 2.4.0p22 and 2.3.0 prior to 2.3.0p43. The root cause is improper neutralization of input in Synthetic Monitoring HTML logs, enabling an attacker who can influence a host’s check output to inject JavaScript in...

7.3CVSS5.4AI score0.00147EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2026/02/26 10:26 a.m.•39 views

CVE-2025-64999 Cross-site scripting in HTML logs of Synthetic Monitoring test services

Improper neutralization of input in Checkmk versions 2.4.0 before 2.4.0p22, and 2.3.0 before 2.3.0p43 allows an attacker that can manipulate a host's check output to inject malicious JavaScript into the Synthetic Monitoring HTML logs, which can then be accessed via a crafted phishing link...

7.3CVSS0.00147EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/26 12:00 a.m.•1 views

CVE-2025-64999: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input in Checkmk versions 2.4.0 before 2.4.0p22, and 2.3.0 before 2.3.0p43 allows an attacker that can manipulate a host's check output to inject malicious JavaScript into the Synthetic Monitoring HTML logs, which can then be accessed via a crafted phishing link...

7.3CVSS5.8AI score0.00147EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2019/06/14 9:51 p.m.•212 views

CocoaDebug - iOS Debugging Tool

iOS Debugging Tool Shake to hide or show the black bubble. support both device and simulator Long press the black bubble to show UIDebuggingInformationOverlay. Apple's Private API, support iOS 10/11/12 Application memory usage and FPS. List all print and NSLog messages which have been written by...

6.9AI score
SaveExploits0References2
Rows per page
Query Builder