CVE-2017-0055-PoC

CVE-2017-0055 PoC MICROSOFT IIS 7.0/7.5/8.0/8.5/10 /UNCPATH/ CROSS SITE SCRIPTING Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-0055 Base Score: 6.1 Severity: Medium Exploit: http://vulniis/uncpath/%3Cimg%20onerror=alert'xss'%20src=/%3E:/...

WordPress Houzez theme <= 4.4.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad in WordPress Theme Houzez versions = 4.4.0...

CVE-2023-0214

SWG Exploit Generator ██████╗ ██████╗ ████████╗███████╗ ██╔═████╗██╔══██╗╚══██╔══╝██╔════╝ ██║██╔██║██████╔╝ ██║ ███████╗ ████╔╝██║██╔═══╝ ██║ ╚════██║ ╚██████╔╝██║ ██║ ███████║ ╚═════╝ ╚═╝ ╚═╝ ╚══════╝ by 0PTS Proof of Concept for the HTTP Response Splitting vulnerability in Skyhigh Secure Web...

CVE-2025-70368

CVE-2025-70368 Stored Cross-Site Scripting XSS in Project Updates Feature | Worklenz All in one project management tool for efficient teams ---|--- 📜 Description Worklenz version 2.1.5 contains a Stored Cross-Site Scripting XSS vulnerability in the Project Updates feature. An attacker can submit ...

EUVD-2026-100798

The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute in all versions up to, and including, 7.5.54.7212 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-95816

The Smart Forms WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.6.104 . The flaw exists in the 'formString' parameter due to insufficient input sanitization and output escaping. Because the nonce check for the rednao_smart_forms_save_form_...

RHEL 9 : ipa (RHSA-2026:83085)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:83085 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and...

PT-2026-114321

Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2025.1.6 MOVEit Transfer versions 2026.0.0 through 2026.0.3 Description Progress MOVEit Transfer Ad Hoc module contains a stored cross-site scripting issue, which occurs when input is not properly neutralized...

CVE-2026-89069: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Progress MOVEit Transfer Ad Hoc module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

PT-2026-113617

The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dg thumber webhook' Action Request Body in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injec...

RHEL 9 : ipa (RHSA-2026:83083)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:83083 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and...

Palo Alto Networks PAN-OS 11.1.x < 11.1.16-h3 / 11.2.x < 11.2.16 / 12.1.x < 12.1.10-h2 / 12.2.x < 12.2.4 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 11.1.x prior to 11.1.16-h3, 11.2.x prior to 11.2.16, 12.1.x prior to 12.1.10-h2, or 12.2.x prior to 12.2.4. It is, therefore, affected by a vulnerability. A stored cross-site scripting XSS vulnerability in Palo Alto Networks...

Linux Distros Unpatched Vulnerability : CVE-2026-109345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify before 3.4.16 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization because INPLACE mode returns a force-removed...

Security Updates for Microsoft Exchange Server (October 2026)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to...

CVE-2026-63171

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious script by submitting a crafted forum category description containing a double-quote character that breaks out of an HTML input value attribute...

CVE-2026-110081

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...

CVE-2026-106629

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable...

CVE-2026-19810

The Symantec Endpoint Detection and Response (SEDR) Console , prior to version 4.13 , is vulnerable to a Cross-Site Scripting (XSS) vulnerability. This issue allows an attacker to inject malicious scripts that execute within the context of another user's session. Such exploitation could lead to u...

CVE-2026-103846 Dimension | Improper Neutralization of Input During Web Page Generation (Cross-Site Scripting) (CWE-79)

Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation o...

CVE-2026-103846

Adobe Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability (CWE-79). A local attacker with user permissions could exploit this flaw to achieve arbitrary code execution in the context of the current user. Exploitation requires user interaction , spe...