CVE-2026-17189

IBM Security Verify Access (versions 10.0 through 10.0.9.2) and IBM Verify Identity Access (versions 11.0 through 11.0.3) are vulnerable to reflected cross-site scripting . This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI, which could alter intend...

CVE-2026-17189 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadin...

EUVD-2026-95279

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadin...

CVE-2026-11936

The local management interface of IBM Security Verify Access (versions 10.0 through 10.0.9.2) and IBM Verify Identity Access (versions 11.0 through 11.0.3) is vulnerable to cross-site scripting (XSS) in certain configurations. This flaw, associated with CWE-79 , allows an authenticated user to em...

EUVD-2026-95266

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus...

CVE-2026-11936 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus...

EUVD-2026-95264

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...

CVE-2026-107397 Indico: Cross-Site-Scripting in minutes editor

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3.13, users who can create content, including speakers who can create minutes, can store crafted HTML in event minutes. When concurrent edits are made to the same minutes, t...

CVE-2026-107397

The event management system Indico is vulnerable to a Cross-Site Scripting (XSS) flaw in its minutes editor prior to version 3.3.13 . The root cause is that users with content creation privileges, such as speakers, can store crafted HTML within event minutes. When concurrent edits occur on the sa...

cyberprobe

Cyberprobe The full documentation is at https://cybermaggedon.github.io/cyberprobe-docs/ Summary Cyberprobe is a network packet inspection toolkit Deep Packet Inspection for real-time monitoring of networks. This has applications in network monitoring, intrusion detection, forensic analysis, and ...

Optiva-Framework

Optiva-Framework 🕵️ Web Application Scanner 💉 Author : Joker-Security dev-labs ✔️ Description : You can use this Framework on your website to check the security of your website by finding the vulnerability in your website or you can use this tool to Get admin panel search SQL injection by dork As...

AwesomeXSS

AwesomeXSS This repository is a collection of Awesome XSS resources. Contributions are welcome and should be submitted via an issue. Awesome contents Challenges Reads & Presentations Tools Mind maps DOM XSS Payloads Polyglots Tags and event handlers Context breaking HTML context Attribute context...

CVE-2026-40804

The aBlocks WordPress plugin (versions

google-dorks-bug-bounty

버그 바운티를 위한 Google Dorks 버그 바운티, 웹 애플리케이션 보안, 모의 침투 테스트를 위한 Google Dorks 목록 Live Tool 부정 검색을 포함한 광범위 도메인 검색 site:example.com -www -shop -share -ir -mfa 매개변수가 있는 PHP 확장자 site:example.com ext:php inurl:? API 엔드포인트 site:example.com inurl:api | site:/rest | site:/v1 | site:/v2 | site:/v3 유용한 확장자들...

CVE-2023-30256

Webkul Qloapps 1.5.2 - 크로스 사이트 스크립팅 XSS Webkul QloApps 1.5.2: 두 개의 매개변수emailcreate 및 back에서 XSS 취약점 익스플로잇 - 개념 증명 PoC XXS: 'back' 매개변수 Payload Parameter back – Plain text: xss onfocus=alert1 autofocus= xss Payload Parameter back – URL Encoded: xss%20onfocus%3dalert1%20autofocus%3d%20xss Full GET...

CVE-2024-39123-Exploit

CVE-2024-39123: Calibre-web 0.6.21 における格納型XSS エクスプロイトの詳細 エクスプロイトタイトル : Calibre-web における格納型XSS 日付 : 2024-05-07 エクスプロイト作成者 : Catalin Iovita & Alexandru Postolache Pentest-Tools.com ベンダーホームページ : Calibre-web GitHub リポジトリ バージョン : 0.6.21 - Romesa テスト環境 : Linux 5.15.0-107、Python 3.10.12、lxml 4.9.4 CVE :...

CVE-2025-57926

Sink: WordPress Coreの仕組みによると、投稿コンテンツではXSSが防止されていますが、このプラグインではコンテンツがエンコードされ、レンダリング時にデコードされるため、意図せずXSSの脆弱性が生じます。 PoC: base64でエンコードされたペイロード は PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg== です。...

tool-29489

Tool-29489 概要 🔍: このツールは、CVE-2023-29489 の脆弱性を持つ URL を特定するために使用されます。 このツールはペイロードを使用してバグを特定します。 tool-29489 のヘルプメニュー: python main.py help URL inputfile outputfile -h または --help : ヘルプオプションを表示します。 -u または --url : チェックする URL を入力します。 -i または --input : 入力ファイルを指定します。 -o または --output : 出力ファイルを指定します。...

CVE-2026-25589-25588-25243-23631-23479-REDIS

Redis 5件のCVEに対するテスト・修正ガイド（2026.05.08時点） 公開日: 2026-05-08 著者: TonyCao [email protected] 出典: Redis Security Advisory 目次 1. 概要 2. 影響を受けるバージョン 3. 各CVEの詳細 CVE-2026-23479 — Unblock Client FlowにおけるUse-after-free CVE-2026-25243 — RESTOREにおけるInvalid Memory Access CVE-2026-25588 — RedisTimeSeries...

CVE-2026-37750

CVE-2026-37750 — School Management System 1.0 - 反射型XSS 詳細 フィールド| 情報 ---|--- CVE ID| CVE-2026-37750 タイプ| 反射型クロスサイトスクリプティング（XSS） 深刻度| 中（CVSSv3: 6.1） ベンダー| mahmoudai1 製品| School Management System バージョン| 1.0 発見者| Varad AP Mene 日付| 2026-04-16 CWE| CWE-79 説明 mahmoudai1によるSchool Management System...