CVE-2026-30559

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addsales.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML...

PT-2026-29062

Name of the Vulnerable Software and Affected Versions Smoothwall Express versions prior to 3.1 Update 13 Description Smoothwall Express is affected by a reflected cross-site scripting issue. The /redirect.cgi endpoint does not properly sanitize the url parameter, allowing attackers to inject...

CVE-2026-30560

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the addsupplier.php file via the "msg" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HT...

CVE-2026-30559

CVE-2026-30559 affects SourceCodester Sales and Inventory System 1.0. A Reflected Cross-Site Scripting (XSS) vulnerability exists in add_sales.php via the msg parameter, where input is not sanitized, allowing remote attackers to inject arbitrary script/HTML through a crafted URL. The CVSS basis i...

CVE-2026-30533

creationtimestamp| type| source ---|---|--- 2026-03-29 17:45:27+00:00| seen| https://bsky.app/profile/breachandbuild.bsky.social/post/3mi7paevod423...

CVE-2026-30532

creationtimestamp| type| source ---|---|--- 2026-03-29 17:45:18+00:00| seen| https://bsky.app/profile/breachandbuild.bsky.social/post/3mi7pa4badw22...

CVE-2026-33691

creationtimestamp| type| source ---|---|--- 2026-03-29 17:26:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mi7o6fbcbz26 2026-03-30 19:28:33+00:00| seen| https://gist.github.com/HackingRepo/e30e7fc6dd9fee0fc349efbc732a45e3 2026-03-30 21:11:43+00:00| seen|...

CVE-2026-23357

creationtimestamp| type| source ---|---|--- 2026-03-29 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0376/ 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-05-31 20:00:00+00:00| seen|...

Cross-site Scripting (XSS)

Overview trix is a Rich Text Editor. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the StringPiece.fromJSON function. An attacker can execute arbitrary JavaScript in the context of the victim's browser by tricking a user into dragging and dropping a crafted...

CVE-2026-33574

creationtimestamp| type| source ---|---|--- 2026-03-29 14:46:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi7faekrp22q...

CVE-2026-32923

creationtimestamp| type| source ---|---|--- 2026-03-29 14:11:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi7dcdvvfd23...

CVE-2026-32914

creationtimestamp| type| source ---|---|--- 2026-03-29 13:39:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7bioted62r 2026-03-29 14:23:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi7dx4p5pe2i 2026-03-29 15:19:56+00:00| published-proof-of-concept|...

CVE-2026-32973

creationtimestamp| type| source ---|---|--- 2026-03-29 13:33:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7b5u6y462p 2026-03-29 14:03:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi7ctg36y627 2026-03-29 15:20:09+00:00| seen|...

CVE-2026-5033

creationtimestamp| type| source ---|---|--- 2026-03-29 06:56:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mi6kxlvply2k 2026-03-29 07:15:45+00:00| published-proof-of-concept| Telegram/6wmzYqTSDiVT0LqBrIEdo0ezESGBQjHEPcQokySpcejMmE 2026-03-31 04:40:09+00:00| seen|...

EUVD-2026-16969

A vulnerability was found in D-Link DIR-513 1.10. This issue affects the function formSetEmail of the file /goform/formSetEmail. Performing a manipulation of the argument curTime results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made...

CVE-2026-5024

A vulnerability was found in D-Link DIR-513 1.10. This issue affects the function formSetEmail of the file /goform/formSetEmail. Performing a manipulation of the argument curTime results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made...

CVE-2026-5024

The report concerns D-Link DIR-513 (1.10). A vulnerability in the formSetEmail function (/goform/formSetEmail) arises from manipulating the curTime argument, causing a stack-based buffer overflow. The flaw is remotely exploitable and an exploit has been published. The affected product is no longe...

CVE-2026-5024 D-Link DIR-513 formSetEmail stack-based overflow

A vulnerability was found in D-Link DIR-513 1.10. This issue affects the function formSetEmail of the file /goform/formSetEmail. Performing a manipulation of the argument curTime results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made...

CVE-2026-5024

A vulnerability was found in D-Link DIR-513 1.10. This issue affects the function formSetEmail of the file /goform/formSetEmail. Performing a manipulation of the argument curTime results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made...

CVE-2026-5024 D-Link DIR-513 formSetEmail stack-based overflow

A vulnerability was found in D-Link DIR-513 1.10. This issue affects the function formSetEmail of the file /goform/formSetEmail. Performing a manipulation of the argument curTime results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made...