276 matches found
CVE-2026-7468: Improper Access Control
A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has bee...
PT-2026-36032
A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has bee...
CVE-2026-4995: Improper Neutralization of Input During Web Page Generation
A vulnerability was determined in wandb OpenUI up to 1.0. Affected by this vulnerability is an unknown functionality of the file frontend/public/annotator/index.html of the component Window Message Event Handler. This manipulation causes cross site scripting. The attack can be initiated remotely...
CVE-2026-4845: Improper Neutralization of Input During Web Page Generation
A flaw has been found in dameng100 muucmf 1.9.5.20260309. Impacted is an unknown function of the file /admin/Member/index.html. This manipulation of the argument Search causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used. The...
CVE-2026-30661
The iCMS v8.0.0 content management system is vulnerable to Cross-Site Scripting (XSS) within the User Management component, specifically in the index.html file. The root cause is the improper handling of the regip and loginip parameters, which allows remote attackers to execute arbitrary web scri...
CVE-2026-30661: Improper Neutralization of Input During Web Page Generation
iCMS v8.0.0 contains a Cross-Site Scripting XSS vulnerability in the User Management component, specifically within the index.html file. This allows remote attackers to execute arbitrary web script or HTML via the regip or loginip parameters...
CVE-2026-2897: Improper Neutralization of Input During Web Page Generation
A security vulnerability has been detected in funadmin up to 7.1.0-rc4. This vulnerability affects unknown code of the file app/backend/view/index/index.html of the component Backend Interface. The manipulation of the argument Value leads to cross site scripting. The attack is possible to be...
CVE-2026-2736: Improper Neutralization of Input During Web Page Generation
Reflected Cross-site Scripting XSS in Alkacon's OpenCms v18.0, which allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL containing the ‘q’ parameter in ‘/search/index.html’. This vulnerability can be exploited to steal sensitive user...
CVE-2019-25367: Improper Neutralization of Input During Web Page Generation
ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface index.html through search, user management, and API parameters. Attackers can inject scripts via parameters in /db/system/admin/aardvark/index.html to execute JavaScript i...
PT-2025-51241
An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html...
CVE-2025-66963
An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html...
CVE-2025-66963: Exposure of Sensitive Information to an Unauthorized Actor
An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html...
EUVD-2010-3276
Malware in sbrugna...
EUVD-2018-20901
Malware in sbrugna...
EUVD-2018-11567
Malware in sbrugna...
EUVD-2019-5482
Malware in sbrugna...
EUVD-1999-0554
Malware in sbrugna...
EUVD-2000-0352
Malware in sbrugna...