CVE-2026-55214 GLPI: Stored XSS in suppliers

GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store active markup in supplier website fields. Any user who opens the affected item's suppliers list triggers the stored cross-site scripting payload. This issue is fixed in version...

Chamilo-LMS-Unauthenticated-File-Upload-CVE-2023-4220

Chamilo-LMS-Unauthenticated-File-Upload- /main/inc/lib/javascript/bigupload/inc/bigUpload.php における大容量ファイルアップロード機能の制限なしファイルアップロードにより、Chamilo LMS ' dollarboysushil.php .png その後、以下のコマンドを実行してこのファイルをアップロードできます。 root@kitploit: $ curl -F '[email protected]'...

CVE-2026-63216 Zammad: Stored XSS via unescaped option labels in the object attribute options context UI

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, unsanitized option labels are rendered in the configuration dialogs of AI Agents within Zammad's admin UI. When rendering the list of selected options, the option label is output as raw HTML without escaping. An...

cve-disclosures

CVE 開示 — Aman Bahiniya 2024年12月にMITREから割り当てられた3件のCVE。レコードは予約されたものの公開されていないため、まだ何もインデックスされていません。このリポジトリはアドバイザリを公開し、CVEが検索可能でクレジット付きになるようにします。...

CVE-2022-31300

CVE-2022-31300 Haraj Script 3.7 - DMセクション 認証済みストアドXSS エクスプロイトタイトル: Haraj Script 3.7 - 認証済みストアドXSS 日付: 2022-06-13 CVE: CVE-2022-31300 エクスプロイト作者: Abdulaziz Saad @b4zb0z ベンダーホームページ: https://angtech.org/ ソフトウェアリンク: https://angtech.org/product/view/3 バージョン: 3.7...

CVE-2026-67239

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 and 4.2.9 and 4.3.3, Stored XSS via TLS peer-certificate DN in stream-management UI sibling of V-11. lines 102/106/110 render peercertsubject / peercertissuer with raw and no fmtstring. RFC4514...

DEBIAN-CVE-2026-67239

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 and 4.2.9 and 4.3.3, Stored XSS via TLS peer-certificate DN in stream-management UI sibling of V-11. lines 102/106/110 render peercertsubject / peercertissuer with raw and no fmtstring. RFC4514...

CVE-2026-18311

Readwise Reader for Android contains a cross-site scripting vulnerability due to missing HTML sanitization in its processing of imported document metadata. Attacker-controlled fields such as the author meta tag are inserted into a WebView via innerHTML, enabling stored XSS that executes on synced...

CVE-2026-100237

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension allows Stored XSS. This issue affects Mediawiki - Thanks Extension: from before 1.43.10/1.45.5/1.46.1...

CVE-2026-18312

Readwise Reader for Android constructs URLs in its WebView using attacker-controlled metadata without proper encoding or escaping. The application interpolates untrusted values directly into URL strings and inserts them into the DOM via innerHTML. Because the interpolation occurs without HTML or...

TP-Link-Archer-CR-700-XSS-Exploit

TP-Link-Archer-CR-700-XSS-Exploit TP-Link Archer CR-700 ルーターの悪用。TP-Link に責任を持って開示済み Step 1- Linux マシン Kali または Ubuntu で次のコマンドを入力します gedit /etc/dhcp/dhclient.conf 以下の行をコメントアウトしてください send host-name = gethostname; それを次の行にコピーし、gethostname 関数を下記のような XSS スクリプトに変更します。 send host-name = "alert5"; Step 2:...

EUVD-2026-87204

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension allows Stored XSS. This issue affects Mediawiki - Thanks Extension: from before 1.43.10/1.45.5/1.46.1...

CVE-2023-34845

CVE-2023-34845 CVE-2023-34845 の脆弱性 POC 脆弱性 新しいコンテンツ作成ページ http://localhost:800/admin/new-content でクロスサイトスクリプティング攻撃を発見しました。 これはユーザーのコンテキストでスクリプトを実行し、攻撃者がブラウザーによって保持されている Cookie やセッショントークンに アクセスできるようにします。 格納型 XSS（持続型 XSS とも呼ばれる）は、非持続型 XSS よりも被害が大きいです。これは、悪意のあるスクリプトが脆弱な Web アプリケーションに直接注入されたときに発生します。...

CVE-2026-18311 CVE-2026-18311

Readwise Reader for Android contains a cross-site scripting vulnerability due to missing HTML sanitization in its processing of imported document metadata. Attacker-controlled fields such as the author meta tag are inserted into a WebView via innerHTML, enabling stored XSS that executes on synced...

CVE-2026-18311

Readwise Reader for Android contains a cross-site scripting vulnerability due to missing HTML sanitization in its processing of imported document metadata. Attacker-controlled fields such as the author meta tag are inserted into a WebView via innerHTML, enabling stored XSS that executes on synced...

EUVD-2026-87232

Readwise Reader for Android contains a cross-site scripting vulnerability due to missing HTML sanitization in its processing of imported document metadata. Attacker-controlled fields such as the author meta tag are inserted into a WebView via innerHTML, enabling stored XSS that executes on synced...

EUVD-2026-87230

Readwise Reader for Android constructs URLs in its WebView using attacker-controlled metadata without proper encoding or escaping. The application interpolates untrusted values directly into URL strings and inserts them into the DOM via innerHTML. Because the interpolation occurs without HTML or...

CVE-2026-96874

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in the Mediawiki - Cargo extension allows Stored XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4...

EUVD-2026-87154

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 and 4.2.9 and 4.3.3, Stored XSS via TLS peer-certificate DN in stream-management UI sibling of V-11. lines 102/106/110 render peercertsubject / peercertissuer with raw and no fmtstring. RFC4514...

CVE-2026-67239

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.18 and 4.0.23 and 4.1.14 and 4.2.9 and 4.3.3, Stored XSS via TLS peer-certificate DN in stream-management UI sibling of V-11. lines 102/106/110 render peercertsubject / peercertissuer with raw and no fmtstring. RFC4514...