707 matches found
CVE-2026-82781
A cross-site scripting (XSS) vulnerability affects the CONPROSYS nano Series by CONTEC . If exploited, an arbitrary script may be executed in the web browser of a logged-in user . The CVSS 3.1 score is 5.4 (MEDIUM) , with low privileges required , user interaction required , and changed scope , i...
EUVD-2026-77234
Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82776
A cross-site scripting (XSS) vulnerability exists in the CONPROSYS PAC Series . When exploited, an arbitrary script may be executed in the context of a logged-in user's web browser, with changed scope (CVSS 3.1: 6.1 MEDIUM ), indicating the impact extends beyond the vulnerable system to the subse...
EUVD-2026-77229
Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82776
Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
EUVD-2026-77226
Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82773
A cross-site scripting (XSS) vulnerability affects CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series devices. When exploited, an arbitrary script may be executed in a logged-in user's web browser. The CNA (jpcert.or.jp) rates this MEDIUM severity (CVSS 3.1: 6.1, CVSS 4.0: 5.1), not...
CVE-2026-82771
Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82771
A cross-site scripting (XSS) vulnerability affects the Contec EC1000 series , allowing an arbitrary script to be executed in a logged-in user's web browser. The CVSS 3.1 score is 5.4 (Medium) with changed scope , indicating cross-origin impact on subsequent system confidentiality and integrity. E...
EUVD-2026-77224
Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
EUVD-2026-77221
Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82769
A cross-site scripting (XSS) vulnerability affects the Contec RP-WAH-SR Series . If exploited, an arbitrary script may be executed in the web browser of a logged-in user . The CNA-assigned CVSS 3.1 score is 5.4 (MEDIUM) with a changed scope and low confidentiality/integrity impact, while the CVSS...
CVE-2026-82767
Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
EUVD-2026-77220
Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-82767
CVE-2026-82767 is a cross-site scripting (XSS) vulnerability in SGA1000 , a product associated with CONTEC (as indicated by the vendor security advisory reference). When exploited, an arbitrary script may be executed on a logged-in user's web browser. The attack vector is adjacent network with no...
CVE-2026-89251
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ad impressions in plugin/ADServer/log.php, allowing logged-in users to submit arbitrary label values that trigger unverified wallet credits to campaign video owners. Attackers can repeatedly POST label=start requests...
CVE-2026-87928
MaxSite CMS versions 0.94 through 109.6 contain a stored cross-site scripting vulnerability in the admin_page upload handler . Any logged-in user can upload HTML files to the uploads/_pages/ directory containing malicious scripts that execute in visitors' browsers when accessed, enabling persiste...
wordpress-jetpack-broken-access-control-exploit
wordpress-jetpack-broken-access-control-exploit This is a Python3 program that exploits Jetpack 13.9.1 broken access control vulnerability CVE-2024-9926. DISCLAIMER This tool is intended for security engineers and appsec people for security assessments. Please use this tool responsibly. I do not...
