Lucene search
+L

6 matches found

OSV
OSV
•added 2026/08/07 4:07 p.m.•10 views

CVE-2026-17596 Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via Blob Store Name

Nexus Repository 3 was found to be vulnerable to stored cross-site scripting XSS. A user with the nexus:blobstores:create or nexus:blobstores:update permission could set a blob store name containing malicious script content, which would later execute in the browser of another user viewing system...

6.3CVSS5.6AI score
SaveExploits0References4
attackerkb
attackerkb
•added 2026/08/07 4:07 p.m.•21 views

CVE-2026-17596

Nexus Repository 3 was found to be vulnerable to stored cross-site scripting XSS. A user with the nexus:blobstores:create or nexus:blobstores:update permission could set a blob store name containing malicious script content, which would later execute in the browser of another user viewing system...

6.3CVSS5.5AI score0.00237EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/08/07 4:07 p.m.•88 views

CVE-2026-17596

CVE-2026-17596 affects Nexus Repository 3. A stored XSS issue arises when a user with nexus:blobstores:create or nexus:blobstores:update can set a blob store name containing malicious script, which then executes in other users’ browsers when viewing system health-check status. Root cause: unsafe ...

6.3CVSS5.5AI score0.00237EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/04/17 3:31 p.m.•21 views

EUVD-2026-23434

A vulnerability was detected in arnobt78 Hotel Booking Management System up to f8922d0e0f6ac1cc761974c7616f44c2bbc04bea. The impacted element is an unknown function of the file /api/health/detailed of the component Health Check Endpoint. Performing a manipulation results in information disclosure...

6.9CVSS5.4AI score0.00532EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/12/19 8:42 p.m.•19 views

Malicious code in system-health-check-test-unique (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 10bfd6e986187675dd7d7e3a8f860807e408fd6a91694ca0e0128be83fa8fc47 Importing the module exfiltrates content of /var/www/html to a remote host --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

7AI score
SaveExploits0References1
OSV
OSV
•added 2025/12/19 8:42 p.m.•21 views

MAL-2025-192679 Malicious code in system-health-check-test-unique (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 10bfd6e986187675dd7d7e3a8f860807e408fd6a91694ca0e0128be83fa8fc47 Importing the module exfiltrates content of /var/www/html to a remote host --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder