CVE-2026-96810 huanzi-qch base-admin Add User CommonController.java save cross site scripting

A vulnerability was identified in huanzi-qch base-admin up to 52816b760cd53244989fd664bbb2b3d4edbfdbf1. This issue affects the function Save of the file base-admin-master\src\main\java\cn\huanzi\qch\baseadmin\common\controller\CommonController.java of the component Add User Handler. The...

CVE-2026-96810 huanzi-qch base-admin Add User CommonController.java save cross site scripting

A vulnerability was identified in huanzi-qch base-admin up to 52816b760cd53244989fd664bbb2b3d4edbfdbf1. This issue affects the function Save of the file base-admin-master\src\main\java\cn\huanzi\qch\baseadmin\common\controller\CommonController.java of the component Add User Handler. The...

EUVD-2026-85737

A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/uploadjson.php of the component KindEditor Upload Interface. This manipulation of the argument imgFile causes cross site scripting. The attack may be initiated remotely. The explo...

CVE-2026-96739

A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/uploadjson.php of the component KindEditor Upload Interface. This manipulation of the argument imgFile causes cross site scripting. The attack may be initiated remotely. The explo...

PT-2026-97688

Name of the Vulnerable Software and Affected Versions huanzi-qch base-admin versions up to 52816b760cd53244989fd664bbb2b3d4edbfdbf1 Description A remote cross site scripting issue exists in the Add User Handler component. The problem occurs within the Save function located in the...

CVE-2026-96739: Improper Neutralization of Input During Web Page Generation

A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/uploadjson.php of the component KindEditor Upload Interface. This manipulation of the argument imgFile causes cross site scripting. The attack may be initiated remotely. The explo...

CVE-2026-97224: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in Excalidraw up to 0.18.1. The impacted element is an unknown function of the file packages/excalidraw/data/restore.ts of the component Imported File Handler. Performing a manipulation of the argument customData.generationData.html results in cross site scripting. Th...

The vulnerability in the LibreNMS network monitoring system’s `sceenario/include/html/print-vrf.inc.php` file allows a intruder to perform cross-site scripting attacks.

The vulnerability of the LibreNMS network monitoring system’s sceenario/include/html/print-vrf.inc.php file is related to deficiencies in the encapsulation process when processing fields such as vrfname, mplsVpnVrfDescription, and mplsVpnVrfRoute. Exploiting this vulnerability allows a remote...

The vulnerability of the LibreNMS network monitoring system, related to deficiencies in the blocking procedures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the LibreNMS network monitoring system is related to deficiencies in the blocking procedures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the SNMP protocol implementation in the LibreNMS network monitoring system allows a perpetrator to gain unauthorized access to protected information and perform cross-site attacks.

The vulnerability of the SNMP protocol implementation in the LibreNMS network monitoring system is related to deficiencies in the process of blocking outdated PHP templates. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information and perform...

FreeBSD : Gitlab -- vulnerabilities (3f11e437-b7cd-11f1-a883-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3f11e437-b7cd-11f1-a883-2cf05da270f3 advisory. Gitlab reports: Double Free issue in Regular Expression Parser impacts GitLab CE/EE Integer...

Linux Distros Unpatched Vulnerability : CVE-2026-79311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - webpy web.py 0.76 is vulnerable to Cross Site Scripting XSS via renderjinja.init. CVE-2026-79311 Note that Nessus relies on the presence of the package as...

RockyLinux 9 : skopeo (RLSA-2026:70641)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70641 advisory. skopeo: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56858 skopeo: Go encoding/asn1: Denial of Service via excessive recursion...

MiracleLinux 9 : containernetworking-plugins-1.9.0-4.el9_8 (AXSA:2026-1906:04)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1906:04 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Deni...

MiracleLinux 9 : podman-5.8.2-7.el9_8 (AXSA:2026-1908:10)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1908:10 advisory. podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 podman: golang net/url: Denial of Service from...

AlmaLinux 9 : buildah (ALSA-2026:70640)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:70640 advisory. buildah: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56853 buildah: Go html/template: Cross-Site Scripting via...

AlmaLinux 9 : skopeo (ALSA-2026:70641)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:70641 advisory. skopeo: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56858 skopeo: Go encoding/asn1: Denial of Service via excessive recursion ...

RHEL 9 : skopeo (RHSA-2026:70641)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70641 advisory. Command line utility to inspect images and repositories directly on Docker registries without the need to pull them. Security Fixes: skopeo...

RHCOS 4 : OpenShift Container Platform 4.16.71 (RHSA-2026:67934)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67934 advisory. - encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 - mime: golang:...

RockyLinux 9 : buildah (RLSA-2026:70640)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70640 advisory. buildah: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56853 buildah: Go html/template: Cross-Site Scripting via...