Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2026/04/02 5:4 a.m.1 views

CVE-2026-5253

A weakness has been identified in bufanyun HotGo 1.0/2.0. Affected by this vulnerability is an unknown functionality of the file /web/src/layout/components/Header/MessageList.vue of the component editNotice Endpoint. Executing a manipulation can lead to cross site scripting. The attack can be...

5.1CVSS4.2AI score0.00011EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/01 6:31 a.m.1 views

EUVD-2026-17775

A weakness has been identified in bufanyun HotGo 1.0/2.0. Affected by this vulnerability is an unknown functionality of the file /web/src/layout/components/Header/MessageList.vue of the component editNotice Endpoint. Executing a manipulation can lead to cross site scripting. The attack can be...

5.1CVSS4.2AI score0.00011EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/01 3:15 a.m.2 views

CVE-2026-5253

A weakness has been identified in bufanyun HotGo 1.0/2.0. Affected by this vulnerability is an unknown functionality of the file /web/src/layout/components/Header/MessageList.vue of the component editNotice Endpoint. Executing a manipulation can lead to cross site scripting. The attack can be...

5.1CVSS4.2AI score0.00011EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/01 3:15 a.m.0 views

CVE-2026-5253 bufanyun HotGo editNotice Endpoint MessageList.vue cross site scripting

A weakness has been identified in bufanyun HotGo 1.0/2.0. Affected by this vulnerability is an unknown functionality of the file /web/src/layout/components/Header/MessageList.vue of the component editNotice Endpoint. Executing a manipulation can lead to cross site scripting. The attack can be...

5.1CVSS4.2AI score0.00011EPSS
Exploits0References4
CVE
CVE
added 2026/04/01 3:15 a.m.8 views

CVE-2026-5253

CVE-2026-5253 affects bufanyun HotGo 1.0/2.0. Affected is an unknown functionality in /web/src/layout/components/Header/MessageList.vue of the editNotice endpoint. The issue allows remote cross-site scripting via a manipulation of that component; the exploit is publicly available. Attack requires...

5.1CVSS4.2AI score0.00011EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/03/09 8:2 a.m.3 views

CVE-2026-3683

A vulnerability was detected in bufanyun HotGo up to 2.0. This issue affects the function ImageTransferStorage of the file /server/internal/logic/common/upload.go of the component Endpoint. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit i...

6.5CVSS5.5AI score0.0005EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/08 12:31 a.m.2 views

EUVD-2026-10198

A vulnerability was detected in bufanyun HotGo up to 2.0. This issue affects the function ImageTransferStorage of the file /server/internal/logic/common/upload.go of the component Endpoint. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit i...

6.5CVSS5.5AI score0.0005EPSS
Exploits0References5
NVD
NVD
added 2026/03/08 12:16 a.m.1 views

CVE-2026-3683

A vulnerability was detected in bufanyun HotGo up to 2.0. This issue affects the function ImageTransferStorage of the file /server/internal/logic/common/upload.go of the component Endpoint. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit i...

6.5CVSS0.0005EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/07 11:32 p.m.2 views

CVE-2026-3683

A vulnerability was detected in bufanyun HotGo up to 2.0. This issue affects the function ImageTransferStorage of the file /server/internal/logic/common/upload.go of the component Endpoint. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit i...

6.5CVSS5.5AI score0.0005EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/07 12:0 a.m.4 views

PT-2026-23892

A vulnerability was detected in bufanyun HotGo up to 2.0. This issue affects the function ImageTransferStorage of the file /server/internal/logic/common/upload.go of the component Endpoint. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit i...

6.5CVSS5.5AI score0.0005EPSS
Exploits0References5
Rows per page
Query Builder