119029 matches found
CVE-2026-105456 Stored XSS via HTML scrubber rule in RTIR
RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, not only to RTIR's own...
CVE-2026-105456 Stored XSS via HTML scrubber rule in RTIR
RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, not only to RTIR's own...
CVE-2026-105456
The RTIR extension for Request Tracker (RT) introduces a Stored XSS vulnerability due to a flawed HTML scrubber rule. The extension allows internal link placeholders but incorrectly permits any link containing that placeholder, including those using the javascript: scheme. This change affects the...
CVE-2026-105456 Stored XSS via HTML scrubber rule in RTIR
RTIR extends RT's HTML scrubber to allow an internal link placeholder, and the extension lets through any link that merely contains the placeholder, including links using the executable javascript: scheme. The change applies to the whole RT instance once RTIR is installed, not only to RTIR's own...
CVE-2026-61728
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected snapshots preceding the respective 0.1.70 and 0.1.76 sink repairs, portal users, including customeruser, can submit stored markup through POST...
CVE-2026-119680
A stored cross-site scripting XSS vulnerability exists in the chart feature of SharePoint Manager Plus SPMP due to improper sanitization and HTML encoding of user-controlled data. An attacker can inject malicious HTML or JavaScript into attributes used to generate charts, including users' full...
CVE-2026-119712 PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents
PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser.fetchsingleurl that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can supply Markdown or HTML via uploads, synced mailboxes, or web...
CVE-2026-119712
The PipesHub software (versions before 0.10.0 ) is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within the ImageParser._fetch_single_url function. Attackers can exploit this by embedding malicious image URLs in Markdown or HTML content provided through uploads, synced mailboxe...
CVE-2026-119712 PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents
PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser.fetchsingleurl that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can supply Markdown or HTML via uploads, synced mailboxes, or web...
CVE-2026-48164
Collabora Online , a suite based on LibreOffice technology, is vulnerable to Reflected HTML injection in versions prior to 24.04.18 and 25.04.11 . The root cause is the substitution of the host_session_id query/form parameter into the cool.html editor page without proper HTML encoding . An attack...
CVE-2026-48164 Collabora Online: Reflected HTML injection through host_session_id
Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11, the hostsessionid query/form parameter is substituted into the cool.html editor page without HTML encoding, unlike parameters passed through the existing variable-encoding...
CVE-2026-48164 Collabora Online: Reflected HTML injection through host_session_id
Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11, the hostsessionid query/form parameter is substituted into the cool.html editor page without HTML encoding, unlike parameters passed through the existing variable-encoding...
CVE-2026-48164 Collabora Online: Reflected HTML injection through host_session_id
Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11, the hostsessionid query/form parameter is substituted into the cool.html editor page without HTML encoding, unlike parameters passed through the existing variable-encoding...
CheckFlashPlayerVersion
CheckFlashPlayerVersion Check the Browser's FlashPlayer version to check if it is vulnerable to exploit CVE-2016-7855 Usage: Clone this repository and then open the html file in the browser where you want to check the Flash Player version...
CVE-2024-22640
CVE-2024-22640 Vulnerability Type Regular expression Denial of Service ReDoS Affected Product and Version TCPDF convertHTMLColorToDec'"t"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000!',$ref; ? Note: Checking with...
CVE-2026-61728 SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected snapshots preceding the respective 0.1.70 and 0.1.76 sink repairs, portal users, including customeruser, can submit stored markup through POST...
CVE-2026-61728 SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected snapshots preceding the respective 0.1.70 and 0.1.76 sink repairs, portal users, including customeruser, can submit stored markup through POST...
CVE-2026-61728
SOCFortress CoPilot is vulnerable to Stored Cross-Site Scripting (XSS) due to unsanitized HTML rendering in the v-html directive within AlertComment.vue. Attackers can submit malicious markup via POST /api/incidents/db_operations/alert/comment, which executes in the context of other users viewing...
EUVD-2026-114059
A stored cross-site scripting XSS vulnerability exists in the chart feature of SharePoint Manager Plus SPMP due to improper sanitization and HTML encoding of user-controlled data. An attacker can inject malicious HTML or JavaScript into attributes used to generate charts, including users' full...
CVE-2026-119680
A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP) . The root cause is the improper sanitization and HTML encoding of user-controlled data, allowing an attacker to inject malicious HTML or JavaScript into attributes like users' full nam...