1243675 matches found
CVE-2026-105708 imgproxy SVG svg.go sanitizeElement cross site scripting
A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component SVG Handler. Executing a manipulation can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has...
[SECURITY] [DSA 6545-1] roundcube security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6545-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 06, 2026 https://www.debian.org/security/faq -...
EUVD-2026-92947
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attac...
CVE-2026-105706
A cross-site request forgery (CSRF) vulnerability exists in the SourceCodester Drug Recommendation System 1.0 . The flaw is located in an unspecified function, allowing a remote attacker to perform unauthorized actions. The documents indicate that a proof-of-concept exploit is publicly available,...
CVE-2026-105706 SourceCodester Drug Recommendation System cross-site request forgery
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attac...
CVE-2026-105706 SourceCodester Drug Recommendation System cross-site request forgery
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attac...
CVE-2026-105705
The SourceCodester Drug Recommendation System 1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw via an unknown function in the Admin/add_drug.php file. This vulnerability allows for remote manipulation resulting in XSS. The documents indicate that an exploit has been released to the public a...
CVE-2026-105705 SourceCodester Drug Recommendation System add_drug.php cross site scripting
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...
CVE-2026-105705 SourceCodester Drug Recommendation System add_drug.php cross site scripting
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/adddrug.php. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the...
cve-2015-3306-lab
CVE-2015-3306 — ProFTPD modcopy 事前認証による任意ファイルコピー 完全に再現可能なラボと、CVE-2015-3306 向けに手書きしたエクスプロイト — 脆弱性研究（パッチ差分解析、手動トリガー、rawソケットによるエクスプロイト開発）の学習演習として構築しました。 脆弱性 ProFTPD の modcopy モジュールは SITE CPFR / SITE CPTO コマンドペアを実装しており、データをクライアントに転送せずにサーバー側で ファイルをコピーします。 バージョン 1.3.5...
Trespasser
CVE-2026-74970 · Firefox Fission site-isolation bypass via missing PipelineId namespace check This directory holds an honest reproduction scaffold for a Fission site-isolation authorization bypass in Firefox WebRender. Under Fission each content process owns a distinct PipelineId namespace, but t...
Cisco ASA/FTD Software - Cross-Site Scripting
Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are vulnerable to cross-site scripting and could allow an unauthenticated, remote attacker to conduct attacks against a user of the web services interface of an affected device. The vulnerabilities are...
Apache OFBiz <=16.11.07 - Cross-Site Scripting
Apache OFBiz 16.11.01 to 16.11.07 is vulnerable to cross-site scripting because data sent with contentId to /control/stream is not sanitized. id: CVE-2020-1943 info: name: Apache OFBiz =16.11.07 - Cross-Site Scripting author: pdteam severity: medium description: Apache OFBiz 16.11.01 to 16.11.07 ...
Roundcube Webmail - Cross-Site Scripting
A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in messagebody in program/actions/mail/show.php. id: CVE-2024-42009 info: name:...
CVE-2022-43332
CVE-2022-43332 WonderCMS의 교차 사이트 스크립팅 설명: Wondercms v3.3.4의 교차 사이트 스크립팅XSS 취약점으로, 잠재적 공격자가 구성 패널Configuration Panel의 사이트 제목Site title 필드에 삽입된 조작된 페이로드를 통해 임의의 웹 스크립트나 HTML을 실행할 수 있습니다. 여기에 더해 쿠키에 HttpOnly 플래그가 없어 로그인한 사용자의 쿠키를 탈취하는 데 악용될 수 있습니다. 재현 방법: 재현하려면 wondercms.com에서 제공되는 zip 파일3.3.4을 다운로드...
CVE-2022-3942
CVE-2022-3942 Sanitization Management System におけるクロスサイトスクリプティング 説明: Sanitization Management System v1.0 のクロスサイトスクリプティング（XSS）脆弱性により、潜在的な攻撃者が Request Quote Form の Remarks フィールドまたは Address フィールドに注入した細工済みペイロードを介して、任意のウェブスクリプトまたは HTML を実行できる可能性があります。ログイン済みのスタッフまたは管理者ユーザーがその見積もりを開くとすぐに XSS...
CVE-2015-7214
CVE-2015-7214 什么是 CVE-2015-7214？ 请参阅以下链接。 通过 data 与 view-source URI 进行的跨站读取攻击 内容 www/index.html 用于 Web 的 SOP 绕过 PoC local/index.html 用于本地的 SOP 绕过 PoC 要求 Firefox 42.0 或更早版本 以下是各平台 Firefox 42.0 的下载链接。 Windows https://ftp.mozilla.org/pub/firefox/releases/42.0/win32/ja/Firefox%20Setup%2042.0.exe Mac...
Exploite-CVE-2023-30212-vulnerability
CVE-2023-30212에 취약한 Docker 환경 생성 설명 Docker 환경 및 CVE-2023-30212 취약점 악용. CVE-2023-30212는 OURPHP 7.2.0 이하 버전에 영향을 미치는 보안 취약점입니다. 이 취약점은 XSSCross-Site Scripting 공격을 허용합니다. OURPHP https://down.chinaz.com/api/index/download?id=51308&type=code CVE-2023-30212 악용 코드exploit를 다운로드합니다 dockerfile을 저장한 폴더에서 터미...
CVE-2023-30212
CVE-2023-30212 CVE-2023-30212의 Docker 환경 및 익스플로잇은 OURPHP 7.2.0 이하 버전에 영향을 미치는 보안 취약점입니다. 이 취약점은 크로스 사이트 스크립팅XSS 공격을 허용합니다...
PT-2026-106390
A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...