44519 matches found
CVE-2026-104396
The Jeroen Peters Name Directory WordPress plugin (versions
CVE-2026-104396 WordPress Name Directory plugin <= 1.34.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeroen Peters Name Directory name-directory allows Stored XSS.This issue affects Name Directory: from n/a through 1.34.2...
EUVD-2026-92324
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeroen Peters Name Directory name-directory allows Stored XSS.This issue affects Name Directory: from n/a through 1.34.2...
WordPress Name Directory plugin <= 1.34.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Masaya Morita @mrtmyix in WordPress Plugin Name Directory versions = 1.34.2...
EUVD-2026-92320
Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name Directory: from n/a through 1.34.2...
CVE-2026-104397
The Jeroen Peters Name Directory WordPress plugin (versions up to and including 1.34.2 ) is vulnerable to a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , potentially leading to Arbitrary Shortcode Execution . ...
CVE-2026-104397 WordPress Name Directory plugin <= 1.34.2 - Arbitrary Shortcode Execution vulnerability
Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name Directory: from n/a through 1.34.2...
CVE-2026-104397 WordPress Name Directory plugin <= 1.34.2 - Arbitrary Shortcode Execution vulnerability
Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name Directory: from n/a through 1.34.2...
WordPress Name Directory plugin <= 1.34.2 - Arbitrary Shortcode Execution vulnerability
Arbitrary Shortcode Execution vulnerability discovered by changsheng in WordPress Plugin Name Directory versions = 1.34.2...
EUVD-2026-92311
Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory...
CVE-2023-43873-e107-CMS-Stored-XSS---Manage
e107 CMS Stored XSS v2.3.2 المؤلف: Sergio الوصف: ثغرة البرمجة النصية عبر المواقع XSS في e017 CMS الإصدار v2.3.2 تسمح لمهاجم محلي بتنفيذ كود تعسفي عبر سكربت مصمم خصيصًا في حقل الاسم في قائمة الإدارة Manage Menu. نواقل الهجوم: البرمجة النصية — ثغرة في تعقيم إدخال حقل الاسم في قسم "Manage" تسمح بحقن...
CVE-2026-105229
A SQL injection vulnerability exists in the User Registration Endpoint of the kishor-23 food-waste-management-system . The flaw is located in the signup.php file, where improper processing of the email , name , and gender arguments allows for remote exploitation. Due to a rolling release system, ...
POC-CVE-2026-19626
CVE-2026-19626 — RCE dans la génération de rapports authentifié, non-admin Statut : CONFIRMÉ — purement distant, non-admin, REST uniquement lab 6.7.2-14.el9, 2026-08-21. La chaîne weaponisée c'est ce que fait poc.py : 1. connexion en tant qu'utilisateur org ordinaire 2. POST /rest/group avec name...
CVE-2020-12629
العنوان: osTicket 1.14.1 - البرمجة النصية عبر المواقع المستمرة والمصادق عليها المؤلف: Mehmet Kelepce / Gais Cyber Security التاريخ: 2020-03-24 رابط المصدر: https://github.com/osticket/osticket/commit/fc4c8608fa122f38673b9dddcb8fef4a15a9c884 CVE: https://vulners.com/cve/CVE-2020-12629 Exploit-Db :...
CVE-2025-46080
BUGAuthor: yggcwhat 影響を受けるバージョン: Huocms ベンダー: https://huocms.com/ ソースコードアドレス: https://gitee.com/digital-flag/huocms 脆弱性ファイル: AttachmentController.php 影響を受けるバージョン： HuoCMS - controller -backend - AttachmentController.php:editFileUrl...
EUVD-2026-92147
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...
CVE-2026-105171
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler...
PT-2026-104762
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeroen Peters Name Directory name-directory allows Stored XSS.This issue affects Name Directory: from n/a through 1.34.2...
CVE-2026-104396: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeroen Peters Name Directory name-directory allows Stored XSS.This issue affects Name Directory: from n/a through 1.34.2...