1213 matches found
CVE-2023-24278
CVE-2023-24278 - Reflected XSS Vulnerabilities in Squidex Overview CVE ID: CVE-2023-24278 Affected Products: Squidex versions prior to 7.4.0 Reported By: Ioannis Christodoulakos This repository provides information and an exploit for two Reflected Cross-Site Scripting XSS vulnerabilities discover...
CVE-2021-43530-UXSS-On-QRcode-Reader-
CVE-2021-43530-UXSS-On-QRcode-Reader- CVE-2021-43530 A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. This bug only affects Firefox for Android. Other operating systems are unaffected.. This...
DedeCMS dede_htmlspecialchars() Code Execution
The vulnerability in DedeCMS’s dedehtmlspecialchars function is related to improper sanitization of special elements in the output. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...
CVE-2021-22204
CVE-2021-22204 Summary of the CVE Improper sanitization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image. Affected Versions Version 7.44 - 12.23 Anomalies Dependencies: djvulibre-bin exiftool Calls these three...
CVE-2024-21534
CVE-2024-21534: Remote Code Execution Vulnerability in jsonpath-plus =10.0.7 Summary This repository contains a Proof of Concept PoC exploit for a critical Remote Code Execution RCE vulnerability in the jsonpath-plus package, affecting versions prior to 10.0.7. The issue stems from improper input...
CVE-2026-120988
billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during legend template rendering...
CVE-2026-120988
The billboard.js library (versions before 4.1.3 ) is vulnerable to a Cross-Site Scripting (XSS) flaw. The issue stems from the improper sanitization of series ids during the rendering of legend templates, which allows an attacker to execute malicious JavaScript. No specific exploit links or remed...
Redux DevTools evalAction RCE
The vulnerability in the evalAction function of the Remotedev Server component within the Redux DevTools library is related to improper sanitization of special elements in output data. Exploitation of this vulnerability may allow an attacker to gain unauthorized access to protected information an...
CLEANSTART-2024-VV95778 Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used
Security vulnerability affects the firefox-esr package. Empty or malformed p256-ECDH public keys may trigger a segmentation fault due values being improperly sanitized before being copied into memory and used...
CLEANSTART-2024-ZW73852 When copying a network request from the developer tools panel as a curl command the output was not being properly sanitized and could allow arbitrary commands to be hidden within
Security vulnerability affects the firefox-esr package. When copying a network request from the developer tools panel as a curl command the output was not being properly sanitized and could allow arbitrary commands to be hidden within...
EUVD-2026-114059
A stored cross-site scripting XSS vulnerability exists in the chart feature of SharePoint Manager Plus SPMP due to improper sanitization and HTML encoding of user-controlled data. An attacker can inject malicious HTML or JavaScript into attributes used to generate charts, including users' full...
CVE-2026-119680 Stored Cross-Site Scripting (XSS) in SharePoint Manager Plus Chart Feature
A stored cross-site scripting XSS vulnerability exists in the chart feature of SharePoint Manager Plus SPMP due to improper sanitization and HTML encoding of user-controlled data. An attacker can inject malicious HTML or JavaScript into attributes used to generate charts, including users' full...
CVE-2026-119680: ManageEngine SharePoint Manager Plus: A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP) due to…
A stored cross-site scripting XSS vulnerability exists in the chart feature of SharePoint Manager Plus SPMP due to improper sanitization and HTML encoding of user-controlled data. An attacker can inject malicious HTML or JavaScript into attributes used to generate charts, including users' full...
CVE-2026-77817
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper sanitization of secrets during flow and project exports...
EUVD-2026-113158
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper sanitization of secrets during flow and project exports...
PT-2026-132284
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to improper sanitization of secrets during flow and project exports...
CVE-2026-87901
Improper sanitization in the registration module allows reflected Cross-Site Scripting...
CVE-2026-87901
Improper sanitization in the registration module allows reflected Cross-Site Scripting...
CVE-2026-87901
A reflected Cross-Site Scripting (XSS) vulnerability exists in the registration module due to improper sanitization . This flaw allows an attacker to execute arbitrary scripts in a user's browser. The vulnerability carries a HIGH base severity score of 8.3 . No specific product version, remediati...