ntopng

ntopng Introduction ntopng® is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. While you can read more about ntopng on the ntop web site...

CVE-2026-127235

A reflected cross-site scripting vulnerability exists in the web user interface of multiple versions of OpenNMS Meridian and Horizon. Several web UI pages copy request parameter values into the HTML response without correct contextual output encoding. A remote attacker can craft a link that runs...

EUVD-2026-124614

A reflected cross-site scripting vulnerability exists in the web user interface of multiple versions of OpenNMS Meridian and Horizon. Several web UI pages copy request parameter values into the HTML response without correct contextual output encoding. A remote attacker can craft a link that runs...

PT-2026-146004

A reflected cross-site scripting vulnerability exists in the web user interface of multiple versions of OpenNMS Meridian and Horizon. Several web UI pages copy request parameter values into the HTML response without correct contextual output encoding. A remote attacker can craft a link that runs...

CVE-2026-127235: The OpenNMS Group: A reflected cross-site scripting vulnerability exists in the web user interface of multiple versions of OpenNMS…

A reflected cross-site scripting vulnerability exists in the web user interface of multiple versions of OpenNMS Meridian and Horizon. Several web UI pages copy request parameter values into the HTML response without correct contextual output encoding. A remote attacker can craft a link that runs...

CVE-2026-18196 IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to inject arbitrary HTML due to improper output neutralization...

CVE-2026-18196

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 and 12.0.1.0 through 12.0.12.30 are vulnerable to HTML injection (CWE-79). The flaw exists in the web user interface and Administration REST API due to improper output neutralization, which could allow a remote attacker to inject arbit...

CVE-2026-18195 IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to perform content spoofing due to improper output encoding of error messages...

CVE-2026-18195 IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to perform content spoofing due to improper output encoding of error messages...

CVE-2026-18195

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 and 12.0.1.0 through 12.0.12.30 are vulnerable to content spoofing. The flaw stems from improper output encoding of error messages , which falls under CWE-79 (Improper Neutralization of Input During Web Page Generation). A remote attac...

arachni-ui-web

Notice Arachni is heading towards obsolescence, try out its next-gen successor Ecsypno SCNR! Arachni - Web User Interface Version | 0.6.1.1 ---|--- Homepage | http://arachni-scanner.com Blog | http://arachni-scanner.com/blog Github | http://github.com/Arachni/arachni-ui-web Documentation |...

CVE-2023-7357 FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability

A remote code execution RCE vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 11.19.4.0 release...

EUVD-2023-60725

A remote code execution RCE vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 11.19.4.0 release...

CVE-2023-7357

A remote code execution (RCE) vulnerability exists in the FlexNet Publisher lmadmin web user interface. The underlying cause is categorized as CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). This vulnerability can lead to unauthorized code execution on the system. The issue is...

CVE-2023-7357 FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability

A remote code execution RCE vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 11.19.4.0 release...

PT-2026-132378

A remote code execution RCE vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 11.19.4.0 release...

CVE-2023-7357: Revera FlexNet Publisher: A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface

A remote code execution RCE vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 11.19.4.0 release...

Revera FlexNet Publisher software supply chain issue vulnerability

The Revera FlexNet Publisher has a vulnerability related to the software supply chain. This vulnerability stems from a remote code execution flaw in the lmadmin web user interface, which may allow arbitrary code execution...

Security Bulletin: IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection (CVE-2026-18196 & CVE-2026-18195)

Summary IBM App Connect Enterprise web user interface and Administration REST API are vulnerable to html injection. Vulnerability Details CVEID:CVE-2026-18196 DESCRIPTION: IBM App Connect Enterprise could allow a remote attacker to inject arbitrary HTML due to improper output neutralization...

Project Browser - Critical - Cross-site request forgery - SA-CONTRIB-2026-178

The Project Browser module enables you to apply recipes and enable modules from the web user interface. The module doesn't sufficiently validate admin actions to protect against cross-site request forgery attacks CSRF...