Lucene search
+L

34 matches found

NVD
NVD
•added 2026/10/13 9:17 p.m.•11 views

CVE-2026-63157

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts by submitting an unsanitized link address adress field that is echoed into an onclick event-handler attribute without neutralizing quotes...

5.4CVSS0.00221EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/10/13 8:01 p.m.•20 views

CVE-2026-63157 Omnispace Agora Project < 26.10.0 Stored XSS via Links Module

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts by submitting an unsanitized link address adress field that is echoed into an onclick event-handler attribute without neutralizing quotes...

5.1CVSS5.6AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/13 8:01 p.m.•12 views

CVE-2026-63157 Omnispace Agora Project < 26.10.0 Stored XSS via Links Module

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts by submitting an unsanitized link address adress field that is echoed into an onclick event-handler attribute without neutralizing quotes...

5.4CVSS5.5AI score0.00221EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•10 views

PT-2026-113375

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts by submitting an unsanitized link address adress field that is echoed into an onclick event-handler attribute without neutralizing quotes...

5.4CVSS5.6AI score0.00221EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-63157: Improper Neutralization of Input During Web Page Generation

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts by submitting an unsanitized link address adress field that is echoed into an onclick event-handler attribute without neutralizing quotes...

5.4CVSS5.6AI score0.00221EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/07/11 1:16 a.m.•11 views

Malicious code in sap-adress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 37c5e4d5d2c6b439b1cf6346ce37ed432f779ff86d16f2776be39c333f0df902 The OpenSSF Package Analysis project identified 'sap-adress' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

7.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2016/08/14 3:05 p.m.•20 views

adress-ip.com XSS vulnerability

Vulnerable URL: http://www.adress-ip.com/whois.php?ip='" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12412083 VIP website status:| No Check adress-ip.c...

6.3AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/12/24 12:00 a.m.•34 views

CastRipper 2.50.70 (.pls) Stack buffer Overflow Exploit WinXP SP3

No description provided by source. !/usr/bin/perl CastRipper 2.50.70 .plsStack buffer Overflow Exploit WinXP SP3 Exploite By : d3b4g my webpage www.d3b4g.info From tiny islands of maldivies Tested on Windows XP SP3 24.12.2009 I used Adress from SHELL32.dll.You can change it to your desired...

7.1AI score
SaveExploits0
zdt
zdt
•added 2009/12/24 12:00 a.m.•42 views

CastRipper 2.50.70 (.pls) Stack buffer Overflow Exploit WinXP SP3

Exploit for unknown platform in category local exploits ================================================================= CastRipper 2.50.70 .pls Stack buffer Overflow Exploit WinXP SP3 ================================================================= Title: CastRipper 2.50.70 .pls Stack buffer...

6.8AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/12/16 12:00 a.m.•46 views

PhpLinkExchange v1.02 - XSS/Upload Vulerability

No description provided by source. PhpLinkExchange v1.02 - XSS/Upload Vulerability Discovered by : Stink' Date : 2009-12-16 Dork : "PhpLinkExchange v1.02" Website Publisher : http://www.idevspot.com/PhpLinkExchange.php -- XSS in URL --...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/05/13 12:00 a.m.•34 views

CastRipper 2.50.70 (.m3u) Universal Stack Overflow Exploit

No description provided by source. !/usr/bin/perl CastRipper 2.50.70 .m3u Universal Stack Overflow Exploit Exploited By Stack first exploiter :d http://www.milw0rm.com/exploits/8660 bien jouer :d frero my $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2009/05/13 12:00 a.m.•37 views

CastRipper 2.50.70 .M3U Universal Stack Overflow

!/usr/bin/perl CastRipper 2.50.70 .m3u Universal Stack Overflow Exploit Exploited By Stack first exploiter :d http://www.milw0rm.com/exploits/8660 bien jouer :d frero my $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

1.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/05/12 12:00 a.m.•26 views

CastRipper 2.50.70 - .m3u Universal Stack Overflow

CastRipper 2.50.70 - .m3u Universal Stack Overflow !/usr/bin/perl CastRipper 2.50.70 .m3u Universal Stack Overflow Exploit Exploited By Stack first exploiter :d http://www.milw0rm.com/exploits/8660 bien jouer :d frero my $shellcode =...

1.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/04/14 12:00 a.m.•31 views

RM Downloader 3.0.0.9 .m3u Universal Stack Overflow Exploit

No description provided by source. !/usr/bin/perl RM Downloader Version 3.0.0.9 .m3u Universal Stack Overflow Exploit Disoverd By Cyber-Zone Exploited By Stack my $Header = "EXTM3U\n"; my $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2009/04/14 12:00 a.m.•29 views

Easy RM To MP3 Converter Stack Overflow

!/usr/bin/python Easy RM to MP3 Converter Universall Stack Overflow Exploit By Stack hihihi StaKer : Only Fabri Fibra :d header = "\x5B\x70\x6C\x61\x79\x6C\x69\x73\x74\x5D" "\x0A\x4E\x75\x6D\x62\x65\x72\x4F\x66\x45" "\x6E\x74\x72\x69\x65\x73\x3D\x31\x0A\x46" "\x69\x6C\x65\x31\x3D" junk = "\x41"12...

0.9AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/04/13 12:00 a.m.•22 views

ASX to MP3 Converter 3.0.0.7 - .m3u Universal Stack Overflow

ASX to MP3 Converter 3.0.0.7 - .m3u Universal Stack Overflow !/usr/bin/perl ASX to MP3 Converter Version 3.0.0.7 .m3u Universal Stack Overflow Exploit Disoverd By Cyber-Zone Exploited By Stack my $Header = "EXTM3U\n"; my $shellcode =...

0.7AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/04/13 12:00 a.m.•137 views

ASX to MP3 Converter 3.0.0.7 - '.m3u' Universal Stack Overflow

!/usr/bin/perl ASX to MP3 Converter Version 3.0.0.7 .m3u Universal Stack Overflow Exploit Disoverd By Cyber-Zone Exploited By Stack my $Header = "EXTM3U\n"; my $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

9.3CVSS7.1AI score0.16506EPSS
SaveExploits8
seebug.org
seebug.org
•added 2008/10/19 12:00 a.m.•30 views

phpFastNews 1.0.0 Insecure Cookie Handling Vulnerability

No description provided by source. Qabandi iqaathotmail.fr from Kuwait \ phpFastNews // Insecure cookie handling \ // Go to any website that has the script installed \ type the following code into the Adress Bar // \ javascript:document.cookie = "fn-loggedin = 1"; // \ Refresh do whatever, and...

7.1AI score
SaveExploits0
zdt
zdt
•added 2008/10/18 12:00 a.m.•37 views

phpFastNews 1.0.0 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ======================================================== phpFastNews 1.0.0 Insecure Cookie Handling Vulnerability ======================================================== from Kuwait \ phpFastNews // Insecure cookie handling \ // Go to any...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2008/10/18 12:00 a.m.•43 views

phpfastnews-insecure.txt

Qabandi iqaathotmail.fr from Kuwait \ phpFastNews // Insecure cookie handling \ // Go to any website that has the script installed \ type the following code into the Adress Bar // \ javascript:document.cookie = "fn-loggedin = 1"; // \ Refresh do whatever, and you will be logged in // \...

7.4AI score
SaveExploits0
Rows per page
Query Builder