CVE-2023-36163

Título del Exploit: BuildaGate5library - Cross-Site Scripting Reflejado XSS Fecha: 06/07/2023 Autor del Exploit: Idan Malihi Página del Proveedor: Ninguna Versión: 5 Probado en: Microsoft Windows 10 Pro CVE: CVE-2023-36163 PoC: Un atacante necesita encontrar el parámetro vulnerable mc= e inyectar...

EUVD-2026-91193

The Motors WordPress plugin before 1.4.124 does not sanitise and escape a listing badge setting before outputting it inside an HTML attribute, allowing users with a custom, administrator-assigned listing-management role to inject arbitrary web scripts that execute when a listing is viewed by any...

CVE-2020-26733

CVE-2020-26733 SKYWORTH GN542VF Versión de Hardware 2.0 y Versión de Software 2.0.0.16 Vulnerabilidad de Cross Site Scripting XSS Descripción Cross Site Scripting XSS en la página de Configuración en SKYWORTH GN542VF Versión de Hardware 2.0 y Versión de Software 2.0.0.16 permite a un atacante...

CVE-2026-33331

CVE-2026-33331 — XSS almacenado en el plugin de referencia OpenAPI de oRPC Laboratorio de prueba de concepto para XSS almacenado en la generación de documentación OpenAPI de orpc Propósito oRPC construye páginas de documentación de API a partir de una especificación OpenAPI. Antes de la v1.13.9,...

CVE-2026-10289-XSS

Sistema de Reservas de Hotel y Turismo - Cross-Site Scripting XSS Almacenado Detalles de la Vulnerabilidad Campo| Detalles ---|--- Título| Sistema de Reservas de Hotel y Turismo - Cross-Site Scripting XSS Almacenado ID CVE| Asignación Pendiente Proveedor| code-projects.org URL del Proveedor|...

OpenNebula-CVE-2025-56536

OpenNebula-CVE-2025-56536 Título del exploit : OpenNebula 6.10.0.1 - XSS almacenado Cross-site Scripting en la información del usuario Autor del exploit : Mark Artamonov Página del proveedor : https://opennebula.io/ Versión probada : OpenNebula 6.10.0.1 Versiones afectadas : OpenNebula Prueba de...

Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-

Creando-un-entorno-Docker-vulnerable-CVE-2023-30212- Descarga los archivos de mi repositorio usando git clone git clone https://github.com/JasaluRah/Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-.git ahora para configurar la imagen docker Creando la imagen docker usa el comando sudo...

CVE-2025-59424

CVE-2025-59424 LinkAce Cross-Site Scripting Almacenado XSS en la página /system/audit...

CVE-2025-65442-DOM-based-Cross-Site-Scripting-XSS-Vulnerability-in-novel-V3.5.0-CWE-79-

Objetivo:http://117.72.165.13:8888/ Github:https://github.com/201206030/novel Versión:V3.5.0 Nombre de la vulnerabilidad:Vulnerabilidad de Cross-Site Scripting XSS basado en DOM en novel V3.5.0 CWE-79 Tipo de vulnerabilidad: Cross-Site Scripting basado en DOM DOM-based XSS Fecha de descubrimiento...

CVE-2026-89427

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 's' Search Parameter in all versions up to, and including, 2.8.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

EUVD-2026-90572

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 's' Search Parameter in all versions up to, and including, 2.8.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2025-12163

CVE-2025-12163: Cross-Site Scripting Almacenado en el Plugin Omnipress de WordPress Tabla de Contenidos Resumen Detalles de la Vulnerabilidad Análisis Técnico Vector de Ataque Guía de Mitigación Métricas CVSS Referencias Contacto de Seguridad Resumen Vulnerabilidad de XSS Almacenado en el Plugin...

Linux Distros Unpatched Vulnerability : CVE-2026-102875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives...

CVE-2026-103321

MISP contains a stored cross-site script XSS vulnerability in the event graph preview feature. The event graph preview image field was accepted and stored without server-side validation. On the client side, the stored value was rendered into an HTML img element's src attribute via string...

CVE-2026-102875

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

DEBIAN-CVE-2026-102875

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

CVE-2026-102875 VLC media player before 3.0.24 Path Traversal via skins2

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

EUVD-2026-89410

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

CVE-2026-102875

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

CVE-2019-19393

Rittal CMC PU III – PoC de XSS Almacenado Aplicación: Gestión web Rittal CMC PU III Dispositivos: CMC PU III 7030.000 Revisión de software: Desde V3.11.002 hasta V3.15.704 Revisión de hardware: Desde V3.00 hasta V6.01 Tipo de ataque: XSS Almacenado Solución: Actualizar a la revisión de software...