Lucene search
+L

127 matches found

SUSE CVE
SUSE CVE
•added 2026/01/06 12:25 a.m.•27 views

SUSE CVE-2025-65754

Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename...

6.1CVSS7.1AI score0.0044EPSS
SaveExploits2References2
OSV
OSV
•added 2025/12/15 8:15 p.m.•16 views

GO-2025-4228 Algernon Cross-Site Scripting vulnerability in github.com/xyproto/algernon

Algernon Cross-Site Scripting vulnerability in github.com/xyproto/algernon...

6.1CVSS7.5AI score0.0044EPSS
SaveExploits2References5
RedhatCVE
RedhatCVE
•added 2025/12/11 12:03 a.m.•25 views

CVE-2025-65754

Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename...

6.1CVSS7AI score0.0044EPSS
SaveExploits2References1
OSV
OSV
•added 2025/12/10 6:30 p.m.•13 views

GHSA-8JQM-8QM3-QGQM Algernon Cross-Site Scripting vulnerability

Cross-site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename...

5.1CVSS7AI score0.0044EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/12/10 6:30 p.m.•14 views

EUVD-2025-202586

Algernon Cross-Site Scripting vulnerability...

5.8AI score0.0044EPSS
SaveExploits2References5
Github Security Blog
Github Security Blog
•added 2025/12/10 6:30 p.m.•14 views

Algernon Cross-Site Scripting vulnerability

Cross-site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename...

6.1CVSS8AI score0.0044EPSS
SaveExploits2References6Affected Software1
NVD
NVD
•added 2025/12/10 6:16 p.m.•13 views

CVE-2025-65754

Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename...

6.1CVSS0.0044EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2025/12/10 12:00 a.m.•48 views

CVE-2025-65754

Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename...

0.0044EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2025/12/10 12:00 a.m.•13 views

algernon 安全漏洞

algernon is a web server by Alexander F. Rødseth Personal Developer. A security vulnerability exists in algernon version 1.17.4, which stems from the presence of cross-site scripting in filenames that could lead to the execution of arbitrary code...

6.1CVSS6.1AI score0.0044EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/10 12:00 a.m.•3 views

CVE-2025-65754: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename...

6.1CVSS6.5AI score0.0044EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2025/12/10 12:00 a.m.•6 views

CVE-2025-65754

Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename...

8AI score0.0044EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2025/12/10 12:00 a.m.•12 views

PT-2025-50364

Name of the Vulnerable Software and Affected Versions Algernon version 1.17.4 Description A Cross Site Scripting issue exists in Algernon version 1.17.4. This allows attackers to execute arbitrary code by injecting a crafted payload into a filename. The issue involves the injection of malicious...

6.1CVSS6.9AI score0.0044EPSS
SaveExploits2
OSV
OSV
•added 2025/12/10 12:00 a.m.•13 views

CVE-2025-65754

Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename...

6.1CVSS7AI score
SaveExploits0References5
GithubExploit
GithubExploit
•added 2025/12/09 4:36 p.m.•204 views

Exploit for CVE-2025-65754

CVE-2025-65754 : Stored XSS in Algernon 1.17.4 Description...

5.8AI score0.0044EPSS
SaveExploits2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2023-1536

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.00691EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
•added 2025/05/23 4:38 a.m.•13 views

CVE-2023-26131

All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto/algernon/themes are vulnerable to Cross-site Scripting XSS via the themes.NoPagefilename, theme function due to improper user input sanitization. Exploiting this vulnerability is possibl...

6.1CVSS6AI score0.00691EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2023/05/31 6:30 a.m.•29 views

Algernon engine and themes vulnerable to Cross-site Scripting

All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto/algernon/themes are vulnerable to Cross-site Scripting XSS via the themes.NoPagefilename, theme function due to improper user input sanitization. Exploiting this vulnerability is possibl...

6.1CVSS6.1AI score0.00691EPSS
SaveExploits1References7Affected Software1
OSV
OSV
•added 2023/05/31 6:30 a.m.•55 views

GHSA-G47H-FGCW-G4PH Algernon engine and themes vulnerable to Cross-site Scripting

All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto/algernon/themes are vulnerable to Cross-site Scripting XSS via the themes.NoPagefilename, theme function due to improper user input sanitization. Exploiting this vulnerability is possibl...

6.1CVSS5.6AI score0.00691EPSS
SaveExploits1References7
OSV
OSV
•added 2023/05/31 5:15 a.m.•16 views

CVE-2023-26131

All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto/algernon/themes are vulnerable to Cross-site Scripting XSS via the themes.NoPagefilename, theme function due to improper user input sanitization. Exploiting this vulnerability is possibl...

6.1CVSS6.4AI score0.00691EPSS
SaveExploits1References5
Prion
Prion
•added 2023/05/31 5:15 a.m.•28 views

Cross site scripting

All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto/algernon/themes are vulnerable to Cross-site Scripting XSS via the themes.NoPagefilename, theme function due to improper user input sanitization. Exploiting this vulnerability is possibl...

5.8CVSS5.9AI score0.00691EPSS
SaveExploits1References5
Rows per page
Query Builder