CVE-2026-6085

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/serial-number-types' that allow the injection and persistence of malicious JavaScript code through parameters such as...

CVE-2026-6088

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/categories' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’,...

CVE-2026-6082

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/payment-methods' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’...

CVE-2026-6084

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/variants' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’, ‘name...

CVE-2026-6087

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/categories' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’,...

CVE-2026-6086

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/serial-number-types' that allow the injection and persistence of malicious JavaScript code through parameters such as...

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 nuclei テンプレート Joomla CVE-2023-23752 - リクエストパラメータがRest APIを突破する 影響を受けるバージョン Joomlaには概ね3つのルーティングエントリがあり、それぞれ 1. ルートディレクトリの index.php（ユーザーが記事にアクセス） 2. ルートディレクトリの administrator/index.php（管理者管理） 3. ルートディレクトリの api/index.php（開発者向けRest API）...

joomla_CVE-2023-23752

joomlaCVE-2023-23752 Joomla - リクエストパラメータがRest APIを突破する 影響を受けるバージョン ​ Joomlaにはおおよそ3つのルーティングエントリがあり、次のとおりです。 ルートディレクトリのindex.php（ユーザーが記事にアクセス） ルートディレクトリのadministrator/index.php（管理者管理） ルートディレクトリのapi/index.php（開発者向けRest API） 認可されていないインターフェースはまさに3番目のエントリーポイントです。したがって、影響を受けるのはJoomla4.0.0——Joomla4.2.7...

CVE-2026-53625-GLPI-PoC

CVE-2026-53625 - GLPI authtype操作による権限昇格 PoC 📌 概要 このリポジトリは、GLPI の 0.70 から 11.0.7 までの全バージョンに 影響する 高 重要度の権限昇格脆弱性 CVE-2026-53625 に 対する倫理的な Proof-of-Concept（PoC）を提供します。 低権限ユーザー（Technician）は、REST API を通じて authtype フィールドを 操作することで、Super-Admin を含む任意のアカウントを完全に制御できます。 この攻撃は 3 つの弱点を連鎖させ、永続的なバックドアの作成を伴う...

EUVD-2026-86625

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/categories' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’,...

CVE-2026-6088

A Stored Cross-Site Scripting (XSS) vulnerability exists in the StockAgile software by Novadigits technologies. The flaw is located in the REST endpoint /inventory/configuration/categories within the API and management panel. It allows an authenticated attacker to inject and persist malicious Jav...

CVE-2026-6088 Stored Cross-Site Scripting in StockAgile by Novadigits technologies

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/categories' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’,...

CVE-2026-6087

The StockAgile platform by Novadigits technologies contains a Stored Cross-Site Scripting (XSS) vulnerability within its API and management panel . Specifically, the server-side REST endpoint /inventory/configuration/categories fails to properly filter or validate inputs in parameters such as 'co...

CVE-2026-6087 Stored Cross-Site Scripting in StockAgile by Novadigits technologies

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/categories' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’,...

EUVD-2026-86624

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/categories' that allow the injection and persistence of malicious JavaScript code through parameters such as ‘code’,...

CVE-2026-6086 Stored Cross-Site Scripting in StockAgile by Novadigits technologies

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/serial-number-types' that allow the injection and persistence of malicious JavaScript code through parameters such as...

EUVD-2026-86623

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/serial-number-types' that allow the injection and persistence of malicious JavaScript code through parameters such as...

CVE-2026-6086

The StockAgile application by Novadigits technologies contains a Stored Cross-Site Scripting (XSS) vulnerability in its API and management panel. Specifically, the REST endpoint /inventory/configuration/serial-number-types fails to properly filter or validate inputs from parameters like code, nam...

EUVD-2026-86622

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/serial-number-types' that allow the injection and persistence of malicious JavaScript code through parameters such as...

CVE-2026-6085

A Stored Cross-Site Scripting (XSS) vulnerability exists in the StockAgile API and management panel developed by Novadigits technologies. The flaw is located on the server side within the REST endpoint /inventory/configuration/serial-number-types. It allows a remote, previously authenticated atta...