CVE-2026-39332 ChurchCRM has Reflected Cross-Site Scripting (XSS) in GeoPage.php

ChurchCRM is an open-source church management system. Prior to 7.1.0, a reflected Cross-Site Scripting XSS vulnerability in GeoPage.php allows any authenticated user to inject arbitrary JavaScript into the browser of another authenticated user. Because the payload fires automatically via autofocu...

Payload-XSS

Payload-XSS Daftar Isi 1. Payload Dasar 1-20payload-...

EUVD-2011-2782

Malware in sbrugna...

EUVD-2023-0946

Malicious code in bioql PyPI...

EUVD-2025-30784

Malicious code in bioql PyPI...

Car Rental Project carrental/search.php file cross-site scripting vulnerability

Car Rental Project is a car rental program. Car Rental Project suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter autofocus in the file /carrental/search.php, which can be exploited by an attacker t...

CVE-2025-10794

A flaw has been found in PHPGurukul Car Rental Project 3.0. Affected by this issue is some unknown functionality of the file /carrental/search.php. Executing manipulation of the argument autofocus can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-10794

A flaw has been found in PHPGurukul Car Rental Project 3.0. Affected by this issue is some unknown functionality of the file /carrental/search.php. Executing manipulation of the argument autofocus can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-10794

A flaw has been found in PHPGurukul Car Rental Project 3.0. Affected by this issue is some unknown functionality of the file /carrental/search.php. Executing manipulation of the argument autofocus can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-10794 PHPGurukul Car Rental Project search.php cross site scripting

A flaw has been found in PHPGurukul Car Rental Project 3.0. Affected by this issue is some unknown functionality of the file /carrental/search.php. Executing manipulation of the argument autofocus can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-10794

CVE-2025-10794 affects PHPGurukul Car Rental Project 3.0. The vulnerability is a cross-site scripting flaw in the /carrental/search.php file, caused by manipulation of the autofocus parameter. Exploitation can be performed remotely and exploits have been published. Multiple sources corroborate th...

CVE-2025-10794 PHPGurukul Car Rental Project search.php cross site scripting

A flaw has been found in PHPGurukul Car Rental Project 3.0. Affected by this issue is some unknown functionality of the file /carrental/search.php. Executing manipulation of the argument autofocus can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

PHPGurukul Car Rental Project 代码注入漏洞

Car Rental Project is a car rental program. Car Rental Project suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter autofocus in the file /carrental/search.php, which can be exploited by an attacker t...

CVE-2025-10794: Improper Neutralization of Input During Web Page Generation

A flaw has been found in PHPGurukul Car Rental Project 3.0. Affected by this issue is some unknown functionality of the file /carrental/search.php. Executing manipulation of the argument autofocus can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2022-45003

Gophish through 0.12.1 allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus...

MAL-2024-7593 Malicious code in sap-autofocus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9e15f13dd2b2789c1e248b55c796edd0c2601ce0327cb603516089a92553c64b The OpenSSF Package Analysis project identified 'sap-autofocus' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-autofocus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9e15f13dd2b2789c1e248b55c796edd0c2601ce0327cb603516089a92553c64b The OpenSSF Package Analysis project identified 'sap-autofocus' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Denial Of Services (DoS)

github.com/gophish/gophish is vulnerable to Denial Of Services DoS. An attacker can cause an application crash through a crafted payload involving autofocus...

GHSA-8GG8-WR4J-V2WR Gophish vulnerable to Denial of Service via crafted payload involving autofocus

Gophish through 0.12.1 allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus...

Gophish vulnerable to Denial of Service via crafted payload involving autofocus

Gophish through 0.12.1 allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus...