52 matches found
CVE-2026-64671
The Waline comment system (versions 3.15.2 and prior ) is vulnerable to Stored Cross-Site Scripting (XSS) . The issue exists in the @waline/client UserList widget , which concatenates server-returned commenter fields, such as the nick and link , directly into root.innerHTML without HTML escaping....
PT-2026-144973
Waline is a comment system with backend support. In versions 3.15.2 and prior, the @waline/client UserList widget builds its DOM by concatenating server-returned commenter fields directly into root.innerHTML with no HTML escaping. The commenter nick and link are stored and returned verbatim by th...
CVE-2026-64671: walinejs waline: Waline is a comment system with backend support
Waline is a comment system with backend support. In versions 3.15.2 and prior, the @waline/client UserList widget builds its DOM by concatenating server-returned commenter fields directly into root.innerHTML with no HTML escaping. The commenter nick and link are stored and returned verbatim by th...
EasyCVR User - Information Disclosure Detection
The EasyCVR Video Management Platform is vulnerable to user information leakage. This template checks for exposed user information through the endpoint /api/v1/userlist?pageindex=0&pagesize=10. !/usr/bin/env python3 -- coding: utf-8 -- """The EasyCVR Video Management Platform is vulnerable to use...
EUVD-2018-10804
Malware in sbrugna...
EUVD-2022-25093
Malicious code in bioql PyPI...
EUVD-2025-28891
Malicious code in bioql PyPI...
CVE-2025-9848
A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0. The affected element is an unknown function of the file /admin/userlist.php. Such manipulation leads to execution after redirect. The attack can be executed remotely. The exploit has been disclosed...
CVE-2025-9848
A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0. The affected element is an unknown function of the file /admin/userlist.php. Such manipulation leads to execution after redirect. The attack can be executed remotely. The exploit has been disclosed...
CVE-2025-9848
A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0. The affected element is an unknown function of the file /admin/userlist.php. Such manipulation leads to execution after redirect. The attack can be executed remotely. The exploit has been disclosed...
CVE-2025-9848 ScriptAndTools Real Estate Management System userlist.php redirect
A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0. The affected element is an unknown function of the file /admin/userlist.php. Such manipulation leads to execution after redirect. The attack can be executed remotely. The exploit has been disclosed...
CVE-2025-9848
CVE-2025-9848 affects ScriptAndTools Real Estate Management System 1.0. The vulnerability resides in an unknown function within the file /admin/userlist.php, allowing manipulation that results in code execution after redirect. It can be exploited remotely and the exploit has been publicly disclos...
PT-2025-35652
Name of the Vulnerable Software and Affected Versions: ScriptAndTools Real Estate Management System version 1.0 Description: A security issue has been identified in ScriptAndTools Real Estate Management System 1.0. The vulnerability involves an unknown function within the /admin/userlist.php file...
PHP-based Real-Estate-Websites Security Vulnerabilities
Real-Estate-website-in-PHP is a free and open source real estate website by scriptandtools individual developers. A security vulnerability exists in Real-Estate-website-in-PHP version 1.0, which originates from an incorrect manipulation of the file /admin/userlist.php resulting in execution after...
CVE-2025-9143
A security flaw has been discovered in Scada-LTS 2.7.8.1. This affects an unknown part of the file mailinglists.shtm. The manipulation of the argument name/userList/address results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public a...
CVE-2025-9143: Improper Neutralization of Input During Web Page Generation
A security flaw has been discovered in Scada-LTS 2.7.8.1. This affects an unknown part of the file mailinglists.shtm. The manipulation of the argument name/userList/address results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public a...
PT-2025-33741 · Scada-Lts · Scada-Lts
Name of the Vulnerable Software and Affected Versions: Scada-LTS version 2.7.8.1 Description: A security flaw exists in Scada-LTS 2.7.8.1 related to the mailing lists.shtm file. Manipulation of the name/userList/address argument can lead to cross-site scripting. This issue is potentially...
CVE-2022-1817
A vulnerability, which was classified as problematic, was found in Badminton Center Management System. This affects the userlist module at /bcms/admin/?page=user/list. The manipulation of the argument username with the input 1 leads to an authenticated cross site scripting. Exploit details have...