CVE-2026-96230

The ASP.NET Core framework is vulnerable to a cross-site scripting (XSS) issue caused by the improper neutralization of input during web page generation. An unauthorized attacker can exploit this vulnerability over a network to achieve execution of arbitrary code . The vulnerability has a CVSS sc...

EUVD-2026-100205

Improper neutralization of input during web page generation 'cross-site scripting' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

CVE-2026-96230

Improper neutralization of input during web page generation 'cross-site scripting' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

CVE-2026-96230

Improper neutralization of input during web page generation 'cross-site scripting' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

CVE-2026-70279

Microsoft Exchange Server is affected by a cross-site scripting (XSS) vulnerability caused by the improper neutralization of input during web page generation. This flaw allows an unauthorized attacker to perform spoofing over a network. While the documents do not specify the exact internal compon...

EUVD-2026-100137

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-97783

A cross-site scripting (XSS) vulnerability exists in Microsoft Office SharePoint due to the improper neutralization of input during web page generation. An unauthorized attacker can leverage this flaw to perform spoofing over a network. Microsoft has released updates to address this issue, and us...

CVE-2026-88204

A cross-site scripting (XSS) vulnerability exists in Microsoft Office SharePoint due to the improper neutralization of input during web page generation. This flaw allows an authorized attacker to perform spoofing over a network. Microsoft has released updates to address this vulnerability; users ...

EUVD-2026-99047

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-102864

A cross-site scripting (XSS) vulnerability exists in Microsoft Office SharePoint due to the improper neutralization of input during web page generation. This flaw allows an authorized attacker to perform spoofing over a network. Microsoft has released updates to address this issue; users are enco...

EUVD-2026-99042

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-102859

A cross-site scripting (XSS) vulnerability exists in Microsoft Office SharePoint due to the improper neutralization of input during web page generation. This flaw allows an authorized attacker to perform spoofing over a network. Microsoft has released security updates to address this issue; users...

CVE-2026-104816 Misskey: Cross-site scripting in RSS feed item links

Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS components display feed item links from configured feeds without verifying their URL schemes. Missing URL scheme verification allows an attacker who controls feed content to provide an unsafe-scheme li...

CVE-2026-104816

The open source federated social media platform Misskey is vulnerable to Cross-site Scripting (XSS) in its RSS components. Specifically, versions 12.0.0 through 2026.7.0 fail to verify URL schemes for feed item links. An attacker who controls feed content can provide an unsafe-scheme link , leadi...

CVE-2026-100133

Adobe Commerce is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,...

CVE-2019-10092_Docker

CVE-2019-10092 Docker - Apache HTTP Server Using $ docker-compose up Using from Docker Hub $ docker run -p 5555:5555 motikan2010/cve-2019-10092 PoC Disclosures/CVE-2019-10092-Limited Cross-Site Scripting in modproxy Error Page-Apache httpd at master · DrunkenShells/Disclosures...

CVE-2015-9251

CVE-2015-9251 [email protected] PoC for CVE-2015-9251 jQuery before 3.0.0. CVE-2015-9251 - PoC Exploit This repository contains a Proof of Concept PoC for the vulnerability CVE-2015-9251 in the jQuery library. The vulnerability allows a Cross-Site Scripting XSS attack through unsanitized JSO...

CVE-2026-102342

A flaw was found in ammonia. This flaw allows stored Cross-Site Scripting XSS in applications configured to permit SVG animate or set elements. The sanitizer fails to properly neutralize animation attributes that target link destinations with JavaScript URIs. A remote attacker can exploit this...

CVE-2019-10092

CVE-2019-10092: Limited Cross-Site Scripting via "Proxy Error" Page in Apache HTTP Server In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the modproxy error page. An attacker could cause the link on the error page to be malformed and instead point t...

CVE-2019-15053

CVE-2019-15053 FAB-2019-00156 Vulnerability discoverd by me CVE-2019-15053 Advisory: advisory.txt Basic Info Advisory ID..........: FAB-2019-00156 Product..............: HTML Include and replace macro Manufacturer.........: The Plugin People Affected Versions..: 1.4.2 and before Tested...