CVE-2026-112038 diem-project diem Version Check Service dmAdminCtrl.js html cross site scripting

A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this vulnerability is the function html of the file dmAdminPlugin/web/js/dmAdminCtrl.js of the component Version Check Service. The manipulation leads to cross site scripting. Remote...

CVE-2026-112038 diem-project diem Version Check Service dmAdminCtrl.js html cross site scripting

A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this vulnerability is the function html of the file dmAdminPlugin/web/js/dmAdminCtrl.js of the component Version Check Service. The manipulation leads to cross site scripting. Remote...

CVE-2026-112038

A cross-site scripting (XSS) vulnerability exists in the diem-project diem software (up to commit 116974edfb9a5b8bd69cb13586dc62bcdbb485ad). The flaw is located in the html function within the dmAdminPlugin/web/js/dmAdminCtrl.js file of the Version Check Service component. This vulnerability allo...

RHEL 8 : python-lxml (RHSA-2026:84592)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:84592 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

CVE-2026-112038: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this vulnerability is the function html of the file dmAdminPlugin/web/js/dmAdminCtrl.js of the component Version Check Service. The manipulation leads to cross site scripting. Remote...

RHEL 8 : python-lxml (RHSA-2026:84593)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:84593 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

openSUSE 16 Security Update : go1.27 (openSUSE-SU-2026:22093-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22093-1 advisory. Update to go1.27.2 bsc1272545: - CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. - CVE-2026-56866:...

openSUSE 16 Security Update : go1.26 (openSUSE-SU-2026:22095-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22095-1 advisory. Update to go 1.26.9 bsc1255111: - CVE-2026-56857: os: Root.MkdirAll can follow junctions out of the root on Windows bsc1284766. - CVE-2026-56866...

PT-2026-117688

🚨 CVE-2026-112991 The html to markdown expansion module in MISP Modules contains a server-side request forgery SSRF vulnerability in its is safe url URL validation function. The BLOCKED RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address...

PT-2026-117634

Name of the Vulnerable Software and Affected Versions markdown-it versions prior to 14.3.3 markdown-it versions prior to 15.0.3 Description When the html option or commonmark preset is enabled, the parser can be forced into quadratic processing time when encountering repeated unterminated inline...

CVE-2025-66849

CVE-2025-66849 Ghost CMS Privilege Escalation PoC Summary In Ghost Foundation Ghost CMS up to 6.4.0, the HTML block within the post draft editor fails to properly sanitize or encode user-supplied content, resulting in a stored cross-site scripting XSS vulnerability. A user with Contributor...

CVE-2017-16568

CVE-2017-16568 1. Exploit Title: Logitech Media Server : HTML code injection and execution. 2. Shodan Dork: Search Logitech Media Server 3. Date: 11/03/2017 4. Exploit Author: Dewank Pant 5. Vendor Homepage: www.logitech.com 6. Version: 7.9.0 7. Tested on: Windows 10, Linux POC: 1. Access and go ...

CVE-2020-16947

CVE-2020-16947 Outlook 2019 Remote Command Execution This bug occured when parsing html contents. if attacker successfully executes this exploit, it can lead to remote command execution. When copying strings out of the ascii range among html contents, the corresponding string is replaced with...

CVE-2023-47119

Table of contents CVE-2023-47119 Detailed analysis POC Escalation ? LAB Setup CVE-2023-47119 A POC for CVE-2023-47119 which is a vulnerability affecting Discourse versions prior to version 3.1.3 of the stable branch and version 3.2.0.beta3 of the beta and tests-passed branches. Some links can...

CVE-2024-26521

CVE-2024-26521 CE-Phoenix-v1.0.8.20 Html Injection vulnearbility Login Page As we can see there is a login page that anyone can understand there is a HTML injection vulnerability are there in this application. Basically in this application all php save in this location as you can see the image...

CVE-2021-30573

CVE 2021-30573 Google Chrome Vulnerabilities CVE-2021-30573 Use after free in GPU in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-30573 Detail Vulnerable versions : The bug works in Google Chrome 91 or lower. It is patched in 92+...

CVE-2021-43032

CVE-2021-43032 In XenForo ≤ 2.2.7, a threat actor with access to the admin panel can save cross-site scripting payloads in any function within the application that accepts HTML code. A payload placed within the 'Advertising' functionality will execute globally on the client side, allowing for...

Bootstrap-with-XSS

Bootstrap Historical Vulnerability PoC Collection This is a static HTML page for learning and research, which integrates multiple Proof of Concept PoC exploits for Cross-Site Scripting XSS vulnerabilities in the historical versions of the Bootstrap framework. This project aims to provide security...

CVE-2026-11645

CVE-2026-11645 - V8 in Google Chrome prior to Remote Code Execution Quick Usage python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: HIGH CVSS: 8.8 Impact: Confidentiality, Integrity, Availability Published: 2026-06-09 Technical Summary Out...

CVE-2026-111932

Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a stored HTML injection vulnerability because the ApplicationName and LogoURL appearance settings are rendered into HTML output without sufficient escaping. Attackers with the Owner role can store...