403 matches found
Oracle iPlanet Web Server 7.0.x - Image Injection
Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc parameter to an admingui URI. This issue exists because of an incomplete fix for CVE-2012-0516. id: CVE-2020-9314 info: name: Oracle iPlanet Web Server 7.0.x - Image Injection author:...
PT-2026-98393
Name of the Vulnerable Software and Affected Versions Premium Packages – Sell Digital Products Securely versions prior to 7.2.2 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a technique where malicious...
CVE-2026-48542
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the product name field. Attackers can craft a product name containing...
CVE-2026-48542 Krayin CRM 2.2.6 Stored Template Injection XSS via Product Name Field
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the product name field. Attackers can craft a product name containing...
CVE-2026-48542
Krayin CRM versions through 2.2.6 are susceptible to a stored client-side template injection vulnerability. Authenticated attackers can inject Vue.js template expressions into the product name field . By using double-brace template syntax, an attacker can bypass standard filters to reach the Vue ...
CVE-2026-48542 Krayin CRM 2.2.6 Stored Template Injection XSS via Product Name Field
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the product name field. Attackers can craft a product name containing...
EUVD-2026-86446
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the product name field. Attackers can craft a product name containing...
CVE-2026-48542 Krayin CRM 2.2.6 Stored Template Injection XSS via Product Name Field
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the product name field. Attackers can craft a product name containing...
CVE-2026-48542: Improper Neutralization of Input During Web Page Generation
Krayin CRM through 2.2.6 contains a stored client-side template injection vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users' browsers by injecting Vue.js template expressions into the product name field. Attackers can craft a product name containing...
PT-2026-98263
Name of the Vulnerable Software and Affected Versions Krayin CRM versions prior to 2.2.7 Description Authenticated attackers can execute arbitrary JavaScript in the browsers of other users via a stored client-side template injection. By injecting Vue.js template expressions into the product name...
CVE-2026-83001
creationtimestamp| type| source ---|---|--- 2026-09-15 22:12:51+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnh2543y2p 2026-09-15 23:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlr7ajaea2r 2026-09-22 13:07:07+00:00| seen|...
CVE-2026-92053
creationtimestamp| type| source ---|---|--- 2026-09-15 14:56:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3werc75hd2cir 2026-09-17 04:47:13+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260917...
CVE-2026-90824
creationtimestamp| type| source ---|---|--- 2026-09-14 22:10:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7h7zntzavp3gr...
CVE-2026-18090
creationtimestamp| type| source ---|---|--- 2026-09-14 07:28:17+00:00| seen| https://bsky.app/profile/mcepl.en.osm.town.ap.brid.gy/post/3mvhlk7tpqhw2...
PT-2026-91117
A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/products handler.php of the component Product Management Module. Executing a manipulation of the argument Product Name can lead to cross site...
CVE-2026-75714
creationtimestamp| type| source ---|---|--- 2026-09-11 05:09:36+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv7sfn7pzv2f...
CVE-2026-4129
creationtimestamp| type| source ---|---|--- 2026-09-10 20:53:33+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mv6wofnphm2r...
CVE-2026-86218
creationtimestamp| type| source ---|---|--- 2026-09-06 04:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mut46pfaww2j 2026-09-06 04:08:06+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mut4mpjtgj2w 2026-09-06 23:45:01+00:00| seen|...
CVE-2026-75816
creationtimestamp| type| source ---|---|--- 2026-09-06 03:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muszfbbcgk25 2026-09-06 04:07:46+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mut4mgrlun2t 2026-09-06 05:00:25+00:00| seen|...