EUVD-2026-75731

The product's web portals allow external links to be opened in a new browser tab. In certain configurations, the originating window retains access to the newly opened page, allowing interaction between the two browser contexts when navigating to external destinations. This vulnerability could all...

CVE-2026-18247

A Cross Site Scripting XSS vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session...

EUVD-2026-56218

A Cross Site Scripting XSS vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session...

CVE-2026-18247 DOM-Based Cross-Site Scripting in BlackBerry AtHoc Web Portals

A Cross Site Scripting XSS vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session...

DSpace 9.2 REST API Automated Document Discovery and Download

This is a framework for collecting data from DSpace systems. Built using Selenium, it is designed to automatically discover and download documents from web repositories and public portals...

IBM WebSphere Portal SSRF & Command Execution Vulnerability

IBM WebSphere Portal is enterprise software for building and managing web portals.IBM WebSphere Portal is a component of WebSphere applications. IBM WebSphere Portal SSRF & Command Execution Vulnerability can be exploited by an attacker to conduct an ssrf exploit, logging in only can create a...

U.S. Dept Of Defense: [Partial] SSN & [PII] exposed through iPERMs Presentation Slide.

Hello @deptofdefense, when performing reconnaissance, I came across a presentation slide that displayed live data since the data is blocked out & is formatted with XXX-XX with the last 4 digits. The exposed data contains the following: UPC, Division/Brigade, Rank, Soldier Name, Last 4 digits of...

Win Free Air Miles for Finding Security Flaws in United Airlines

If you are a security researcher and fond of traveling from one conference to another, then United Airlines' bug bounty program would be of great interest for you. United Airlines has launched a new bug bounty program inviting security researchers and bug hunters to report vulnerabilities in its...

Contacto portales web (interna.php) SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================================== Contacto portales web interna.php SQL Injection Vulnerability =============================================================== !/usr/bin/perl Author: Thehacker Site: :GODHACK.ORG :...

MixedCMS 1.0b (LFI/SU/AB/FD) Multiple Remote Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------...