Lucene search
+L

207 matches found

Kitploit
Kitploit
added 2026/08/26 9:57 p.m.2 views

CVE-2024-57175

CVE-2024-57175: Cross-Site Scripting XSS Memorizzato in PHPGURUKUL Online Birth Certificate System v1.0 Descrizione Una vulnerabilità di Cross-Site Scripting XSS Memorizzato è stata identificata in PHPGURUKUL Online Birth Certificate System v1.0 nella pagina /user/certificate-form.php. Questa...

5.4CVSS5.1AI score0.00274EPSS
SaveExploits2References1
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.111 views

DomainMOD 4.11.01 - Cross-Site Scripting

DomainMOD 4.11.01 contains a cross-site scripting vulnerability via assets/add/dns.php Profile Name or notes field. id: CVE-2018-19914 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 contains a cross-site scripting...

4.8CVSS5.3AI score0.03316EPSS
SaveExploits5References5
NVD
NVD
added 2026/08/24 7:17 p.m.9 views

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

8.5CVSS0.00962EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/24 6:26 p.m.31 views

CVE-2026-78541 Command Injection in Parent Control of TP-Link Archer BE3600 v1

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

8.5CVSS0.00962EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/08/12 7:36 p.m.6 views

CVE-2026-17082 IBM i is Affected By Multiple Vulnerabilities in the Debug Server

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of a client-supplied profile name...

8.8CVSS5.3AI score0.00282EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/12 7:36 p.m.7 views

EUVD-2026-57521

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of a client-supplied profile name...

8.8CVSS5.3AI score0.00282EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/12 12:00 a.m.4 views

PT-2026-71268

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can gain elevated privileges due to improper validation of a client-supplied profile name. Recommendations At the moment, there is no information about a newer version...

8.8CVSS5.3AI score0.00282EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/14 10:16 p.m.17 views

CVE-2026-47730

Twig is a template language for PHP. From 3.0.0 until 3.26.0, Twig\Profiler\Dumper\HtmlDumper writes Profile::getTemplate and Profile::getName into HTML output without escaping, allowing attacker-controlled template or profile names to inject arbitrary HTML when a browser renders the profiler dum...

5.4CVSS0.00295EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/07/14 9:21 p.m.25 views

CVE-2026-47730

Twig is a template language for PHP. From 3.0.0 until 3.26.0, Twig\Profiler\Dumper\HtmlDumper writes Profile::getTemplate and Profile::getName into HTML output without escaping, allowing attacker-controlled template or profile names to inject arbitrary HTML when a browser renders the profiler dum...

5.4CVSS5.4AI score0.00295EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:00 a.m.15 views

openSUSE 16 Security Update : perl-DBI (openSUSE-SU-2026:21293-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21293-1 advisory. This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead...

9.1CVSS6.3AI score0.00479EPSS
SaveExploits0References6
Snyk
Snyk
added 2026/07/13 5:22 p.m.8 views

Cross-site Scripting (XSS)

Overview nukeviet/nukeviet is a the first opensource CMS in Vietnam. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the COMMENT.postname template variable, which is interpolated without proper JavaScript-context escaping into an inline onclick handler. An attacke...

8.7CVSS6.2AI score
SaveExploits0References2
OSV
OSV
added 2026/07/10 9:13 a.m.5 views

SUSE-SU-2026:22592-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. - CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a proce...

9.1CVSS6.3AI score0.00479EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/10 9:13 a.m.11 views

SUSE-SU-2026:22623-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. - CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a proce...

9.1CVSS6.1AI score0.00479EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/10 9:12 a.m.7 views

OPENSUSE-SU-2026:21293-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. - CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a proce...

9.1CVSS6.3AI score0.00479EPSS
SaveExploits0References4
NVD
NVD
added 2026/06/22 4:16 p.m.22 views

CVE-2026-11943

Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...

4.8CVSS0.00441EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/22 3:30 p.m.16 views

EUVD-2026-38270

Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...

4.8CVSS5.7AI score0.00441EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/06/22 3:30 p.m.11 views

CVE-2026-11943 Akaunting 3.1.21 - Authenticated stored XSS in document timeline

Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...

4.8CVSS5.7AI score0.00441EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/06/22 3:30 p.m.6 views

CVE-2026-11943

Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...

4.8CVSS5.7AI score0.00441EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/06/22 3:30 p.m.9 views

CVE-2026-11943 Akaunting 3.1.21 - Authenticated stored XSS in document timeline

Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...

4.8CVSS5.8AI score
SaveExploits0References4
CVE
CVE
added 2026/06/22 3:30 p.m.42 views

CVE-2026-11943

CVE-2026-11943 affects Akaunting 3.1.21 and is an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name, which can be reflected in the UI. The CVSS4 vector ...

4.8CVSS5.7AI score0.00441EPSS
SaveExploits0References2
Rows per page
Query Builder