Next.js dynamic-route param injection (CVE-2026-44574)

Probes GHSA-492v-c6pp-mqqv: inbound nxtP / nxtI internal search params plus proxy-style headers can skew App Router params vs middleware pathname; second probe uses %252F in a dynamic segment. Configure sentinel to a string only the protected page renders. !/usr/bin/env python3 -- coding: utf-8 -...

CVE-2017-20155

A vulnerability was found in Sterc Google Analytics Dashboard for MODX up to 1.0.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file core/components/analyticsdashboardwidget/elements/tpl/widget.analytics.tpl of the component Internal...

Cross site scripting

A vulnerability was found in Sterc Google Analytics Dashboard for MODX up to 1.0.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file core/components/analyticsdashboardwidget/elements/tpl/widget.analytics.tpl of the component Internal...

CVE-2017-20155

A vulnerability was found in Sterc Google Analytics Dashboard for MODX up to 1.0.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file core/components/analyticsdashboardwidget/elements/tpl/widget.analytics.tpl of the component Internal...

CVE-2017-20155 Sterc Google Analytics Dashboard for MODX Internal Search widget.analytics.tpl cross site scripting

A vulnerability was found in Sterc Google Analytics Dashboard for MODX up to 1.0.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file core/components/analyticsdashboardwidget/elements/tpl/widget.analytics.tpl of the component Internal...