477749 matches found
CVE-2022-33075
CVE-2022-33075 Título do Exploit: Zoo Management System 1.0 - Cross-Site-Scripting XSS Armazenado Data: 26/05/2022 Autor do Exploit: Angelo Pio Amirante Homepage do Fornecedor: https://www.sourcecodester.com/ Link do Software:...
CVE-2022-31897
CVE-2022-31897 Data: 06/22/2022 Autore dell'exploit: Angelo Pio Amirante Homepage del fornitore: https://www.sourcecodester.com/ Link del software: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html Versione: 1.0...
CVE-2025-51400
Exploit-Titel: LiveHelperChat =4.61 – Stored Cross Site Scripting XSS über persönliche vorgefertigte Nachrichten Personal Canned Messages Datum: 09/06/2025 Exploit-Autor: Manojkumar J TheWhiteEvil LinkedIn: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Hersteller-Homepage:...
EUVD-2026-65202
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
CVE-2026-56704
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
CVE-2026-56704
Adminer versions before 5.4.3 are vulnerable to cross-site scripting (XSS) caused by unsanitized database server version strings being inserted into [removed] tags that carry valid CSP nonces. An attacker who controls a rogue MySQL server can return a crafted version string that breaks out of the...
CVE-2018-10732
CVE-2018-10732 Exploit-DB प्रकाशन: कोई खुलासा नहीं! Dataiku विक्रेता पैच और क्रेडिट: https://doc.dataiku.com/dss/latest/releasenotes/4.2.htmlsecurity लेखक Alex Hernandez उर्फ @alt3kx...
CVE-2008-6827
CVE-2008-6827 Symantec Altiris Client Service 6.8.378 - Escalation dei privilegi locale Pubblicazione Exploit-DB: https://www.exploit-db.com/exploits/5625/ Autore Alex Hernandez alias @alt3kx...
CVE-2023-51504
CVE-2023-51504 Dies ist eine dockerisierte Reproduktion der MotoCMS-SQL-Injection vgl. Exploit-DB Beschreibung MotoCMS Version 3.4.3 SQL-Injection über den Keyword-Parameter unter dem Link https://template189526.motopreview.com/store/category/search/?keyword=1 Die Reproduktion der Schwachstelle...
EUVD-2026-65159
Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...
EUVD-2026-65176
Unauthenticated Cross Site Scripting XSS in Stripe Payments = 2.1.2 versions...
EUVD-2026-65168
Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...
EUVD-2026-65162
Unauthenticated SQL Injection in Boost = 2.0.4 versions...
EUVD-2026-65170
Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...
EUVD-2026-65171
Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...
EUVD-2026-65161
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...