Lucene search
+L

56 matches found

Kitploit
Kitploit
•added 2026/10/13 11:42 a.m.•24 views

ssh-chatter

SSH-Chatter: TUI Bulletin Board System in C ssh [email protected] General BBS Software SSH-Chatter has started from a C reimplementation of the Go ssh-chat server. It mirrors/extends the original behaviour while using modern C patterns and a small, testable core. The server listens for...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/12 3:14 a.m.•17 views

chatter

april 9, 2023 abandonware - sorry - busy elsewhere. will recode from scratch in a xplatform language in exchange for tons of money. october 6, 2021 this may soon no longer be abandonware. as for now it is very unstable. i'd like to recode it from scratch. description chatter is a proof of concept...

6AI score
SaveExploits0References3
NVD
NVD
•added 2026/09/21 2:17 p.m.•18 views

CVE-2026-94387

Aureus ERP before 1.6.0 contains a stored cross-site scripting vulnerability in the Chatter field-change log where oldvalue and newvalue entries are rendered without proper escaping. Any user permitted to edit tracked text fields can inject malicious markup that executes when other users, includi...

5.4CVSS0.00321EPSS
SaveExploits0References8
CVE
CVE
•added 2026/09/21 1:43 p.m.•26 views

CVE-2026-94387

Aureus ERP before version 1.6.0 is affected by a stored cross-site scripting (XSS) vulnerability in the Chatter field-change log component. The root cause is that old_value and new_value entries are rendered without proper escaping in the Filament blade template. Any user permitted to edit tracke...

5.4CVSS5.7AI score0.00321EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/21 1:43 p.m.•10 views

EUVD-2026-83915

Aureus ERP before 1.6.0 contains a stored cross-site scripting vulnerability in the Chatter field-change log where oldvalue and newvalue entries are rendered without proper escaping. Any user permitted to edit tracked text fields can inject malicious markup that executes when other users, includi...

5.4CVSS5.7AI score0.00321EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/09/21 1:43 p.m.•17 views

CVE-2026-94387 Aureus ERP before 1.6.0 Stored XSS via Chatter Field-Change Log

Aureus ERP before 1.6.0 contains a stored cross-site scripting vulnerability in the Chatter field-change log where oldvalue and newvalue entries are rendered without proper escaping. Any user permitted to edit tracked text fields can inject malicious markup that executes when other users, includi...

5.4CVSS5.7AI score0.00321EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/09/21 1:43 p.m.•66 views

CVE-2026-94387 Aureus ERP before 1.6.0 Stored XSS via Chatter Field-Change Log

Aureus ERP before 1.6.0 contains a stored cross-site scripting vulnerability in the Chatter field-change log where oldvalue and newvalue entries are rendered without proper escaping. Any user permitted to edit tracked text fields can inject malicious markup that executes when other users, includi...

5.4CVSS0.00321EPSS
SaveExploits0References8
OSV
OSV
•added 2026/09/21 1:43 p.m.•7 views

CVE-2026-94387 Aureus ERP before 1.6.0 Stored XSS via Chatter Field-Change Log

Aureus ERP before 1.6.0 contains a stored cross-site scripting vulnerability in the Chatter field-change log where oldvalue and newvalue entries are rendered without proper escaping. Any user permitted to edit tracked text fields can inject malicious markup that executes when other users, includi...

5.1CVSS5.7AI score
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/21 12:00 a.m.•10 views

CVE-2026-94387: Improper Neutralization of Input During Web Page Generation

Aureus ERP before 1.6.0 contains a stored cross-site scripting vulnerability in the Chatter field-change log where oldvalue and newvalue entries are rendered without proper escaping. Any user permitted to edit tracked text fields can inject malicious markup that executes when other users, includi...

5.4CVSS5.7AI score0.00321EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/21 12:00 a.m.•5 views

PT-2026-96103

Name of the Vulnerable Software and Affected Versions Aureus ERP versions prior to 1.6.0 Description A stored cross-site scripting issue exists in the Chatter field-change log. The system fails to properly escape the old value and new value entries. This allows a user with permissions to edit...

5.4CVSS5.5AI score0.00321EPSS
SaveExploits0References13
GithubExploit
GithubExploit
•added 2026/06/01 4:51 p.m.•132 views

signal-echo-radar

Signal Echo Radar Signal Echo Radar is a static cybersecurity...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/03/26 3:07 p.m.•17 views

CVE-2026-4175

A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message Handler. Executing a manipulation of...

5.1CVSS3.6AI score0.00362EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/03/16 3:30 p.m.•11 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the Chatter Message Handler process. An attacker can inject and execute arbitrary scripts by manipulating the subject or body arguments. Details Cross-site scripting or XSS is a code vulnerability that occurs...

5.1CVSS5.4AI score0.00362EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/03/16 3:30 p.m.•35 views

Aureus ERP vulnerable to cross-site scripting in the Chatter Message Handler

A vulnerability was determined in Aureus ERP up to 1.3.0-BETA1. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message Handler. Executing a manipulation of...

5.1CVSS3.6AI score0.00362EPSS
SaveExploits0References8Affected Software1
EUVD
EUVD
•added 2026/03/16 3:30 p.m.•21 views

EUVD-2026-12224

A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message Handler. Executing a manipulation of...

5.1CVSS3.6AI score0.00362EPSS
SaveExploits0References7
OSV
OSV
•added 2026/03/16 3:30 p.m.•22 views

GHSA-76C2-3Q6G-XVPM Aureus ERP vulnerable to cross-site scripting in the Chatter Message Handler

A vulnerability was determined in Aureus ERP up to 1.3.0-BETA1. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message Handler. Executing a manipulation of...

5.1CVSS3.5AI score0.00362EPSS
SaveExploits0References8
NVD
NVD
•added 2026/03/16 2:19 p.m.•15 views

CVE-2026-4175

A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message Handler. Executing a manipulation of...

5.1CVSS0.00362EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/16 12:00 a.m.•7 views

CVE-2026-4175: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message Handler. Executing a manipulation of...

5.1CVSS3.6AI score0.00362EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/15 10:32 a.m.•4 views

CVE-2026-4175 Aureus ERP Chatter Message content-text-entry.blade.php cross site scripting

A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message Handler. Executing a manipulation of...

5.1CVSS3.6AI score0.00362EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/03/15 10:32 a.m.•54 views

CVE-2026-4175 Aureus ERP Chatter Message content-text-entry.blade.php cross site scripting

A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2. The affected element is an unknown function of the file plugins/webkul/chatter/resources/views/filament/infolists/components/messages/content-text-entry.blade.php of the component Chatter Message Handler. Executing a manipulation of...

5.1CVSS0.00362EPSS
SaveExploits0References6
Rows per page
Query Builder