CVE-2026-35102

HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface Navbar component. The switch-version action redirected the browser to a dynamically constructed URL window origin + '/workspace' without validating the redirect destination. This may be used in...

CVE-2026-35102

The HCL AION platform is vulnerable to an open redirect vulnerability within the navigation bar of the GenAI web interface (specifically the Navbar component ). The issue is caused by the switch-version action, which redirects the browser to a dynamically constructed URL (window origin + '/worksp...

CVE-2026-35102 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface Navbar component. The switch-version action redirected the browser to a dynamically constructed URL window origin + '/workspace' without validating the redirect destination. This may be used in...

EUVD-2026-118255

HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface Navbar component. The switch-version action redirected the browser to a dynamically constructed URL window origin + '/workspace' without validating the redirect destination. This may be used in...

CVE-2026-35102: HCL Software HCL AION: HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface (Navbar…

HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface Navbar component. The switch-version action redirected the browser to a dynamically constructed URL window origin + '/workspace' without validating the redirect destination. This may be used in...

Malicious code in @marketfront/navbar (npm)

The @marketfront/navbar package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

CVE-2026-10810

A weakness has been identified in itsourcecode Fees Management System up to 1.0. Affected is an unknown function of the file /navbar.php. This manipulation of the argument page causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2026-10810

A weakness has been identified in itsourcecode Fees Management System up to 1.0. Affected is an unknown function of the file /navbar.php. This manipulation of the argument page causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2026-10810

CVE-2026-10810 affects itsourcecode Fees Management System up to version 1.0. The vulnerability resides in an unknown function of /navbar.php, whose manipulation leads to cross-site scripting. Exploitation is possible remotely and PoCs exist publicly. The CVE metrics indicate a MEDIUM severity (v...

EUVD-2026-34261

A weakness has been identified in itsourcecode Fees Management System up to 1.0. Affected is an unknown function of the file /navbar.php. This manipulation of the argument page causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2026-10810 itsourcecode Fees Management System navbar.php cross site scripting

A weakness has been identified in itsourcecode Fees Management System up to 1.0. Affected is an unknown function of the file /navbar.php. This manipulation of the argument page causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2026-10810 itsourcecode Fees Management System navbar.php cross site scripting

A weakness has been identified in itsourcecode Fees Management System up to 1.0. Affected is an unknown function of the file /navbar.php. This manipulation of the argument page causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to t...

Itsourcecode Fee Management System Code Injection Vulnerability

itsourcecode Fees Management System is an open-source charging management system developed by itsourcecode. Versions of itsourcecode Fees Management System 1.0 and earlier had a code injection vulnerability. This vulnerability stemmed from the operation of unknown functions in the /navbar.php fil...

PT-2026-46223

A weakness has been identified in itsourcecode Fees Management System up to 1.0. Affected is an unknown function of the file /navbar.php. This manipulation of the argument page causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to t...

EUVD-2026-18118

A security vulnerability has been detected in itsourcecode Payroll Management System up to 1.0. Affected is an unknown function of the file /navbar.php. Such manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2026-5319

A security vulnerability has been detected in itsourcecode Payroll Management System up to 1.0. Affected is an unknown function of the file /navbar.php. Such manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2026-5319 itsourcecode Payroll Management System navbar.php cross site scripting

A security vulnerability has been detected in itsourcecode Payroll Management System up to 1.0. Affected is an unknown function of the file /navbar.php. Such manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2026-5319

A security vulnerability has been detected in itsourcecode Payroll Management System up to 1.0. Affected is an unknown function of the file /navbar.php. Such manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2026-5319

CVE-2026-5319 affects itsourcecode Payroll Management System up to version 1.0. The vulnerability is in an unknown function of the file /navbar.php and enables cross-site scripting through manipulation of the argument page. It can be exploited remotely, and the exploit has been publicly disclosed...

Itsourcecode Payroll Management System Code Injection Vulnerability

itsourcecode Payroll Management System is an open-source payroll management system developed by itsourcecode. Version 1.0 of the itsourcecode Payroll Management System has a code injection vulnerability. This vulnerability stems from improper handling of the page parameter in the /navbar.php file...