1143910 matches found
Nagios XI < 5.8.6 - Cross-Site Scripting
In Nagios XI before 5.8.6, XSS exists in the dashboard page /dashboards/ when administrative users attempt to edit a dashboard. id: CVE-2021-38156 info: name: Nagios XI 5.8.6 - Cross-Site Scripting author: ritikchaddha severity: medium description: | In Nagios XI before 5.8.6, XSS exists in the...
Nagios XI 5.7.5 - Cross-Site Scripting
Nagios XI 5.7.5 contains a cross-site scripting vulnerability in the file /usr/local/nagiosxi/html/admin/sshterm.php, due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal session cookies, or it can be chained with th...
CHIYU TCP/IP Converter - Cross-Site Scripting
CHIYU BF-430, BF-431 and BF-450M TCP/IP Converter devices contain a cross-site scripting vulnerability due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, and ppp.cgi. id: CVE-2021-31250 info: name: CHIYU TCP/IP Converter - Cross-Site Scripting author: geeknik...
xss-payload-list
xss-payload-list 🎯 Cross Site Scripting XSS Vulnerability Payload List...
WBCE-CMS-Stored-XSS---Pages-Menu
WBCE CMS Stored XSS v1.6.1 Author: Sergio Description: WBCE CMS 1.6.1 is affected by a Cross-Site stored scripting XSS vulnerability that allows attackers to execute arbitrary code via a payload crafted in the Intro Page parameter in the Pages menu. The payload will be executed on the main page...
EUVD-2026-87083
Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package...
CVE-2026-55214: Improper Encoding or Escaping of Output
GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store active markup in supplier website fields. Any user who opens the affected item's suppliers list triggers the stored cross-site scripting payload. This issue is fixed in version...
MiracleLinux 9 : buildah-1.43.3-2.el9_8 (AXSA:2026-1915:08)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1915:08 advisory. buildah: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56853 buildah: Go html/template: Cross-Site Scripting...
MiracleLinux 9 : skopeo-1.22.2-8.el9_8 (AXSA:2026-1913:05)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1913:05 advisory. skopeo: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56858 skopeo: Go encoding/asn1: Denial of Service via excessive...
VulnCheck KEV: CVE-2026-93622
Unauthenticated Cross Site Scripting XSS in WPS Limit Login = 1.5.9.3 versions...
CVE-2026-78902
Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package...
CVE-2026-96877: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4...
CVE-2026-78902
A Cross Site Scripting (XSS) vulnerability exists in Netgate pfSense 26.03.1-RELEASE . This flaw specifically affects the pfBlockerNG package , potentially allowing an attacker to achieve arbitrary code execution . No specific remediation or exploit details are provided in the documents.
CVE-2022-48311
CVE-2022-48311 HP Deskjet 2540 series impresora versión de firmware CEP1FN1418BR y número de modelo de producto A9U23B página de configuración HTTP vulnerabilidad de Cross Site Scripting XSS Description Cross Site Scripting XSS en la impresora HP Deskjet 2540 series, versión de firmware...
CVE-2020-26733
CVE-2020-26733 SKYWORTH GN542VF Versión de Hardware 2.0 y Versión de Software 2.0.0.16 Vulnerabilidad de Cross Site Scripting XSS Descripción Cross Site Scripting XSS en la página de Configuración en SKYWORTH GN542VF Versión de Hardware 2.0 y Versión de Software 2.0.0.16 permite a un atacante...
Security Bulletin: IBM i is Affected By a Cross-Site Scripting Vulnerability in Navigator for i [CVE-2026-75838]
Summary IBM Navigator for i uses DOMPurify for HTML sanitization. DOMPurify is vulnerable to cross-site scripting due to failure to neutralize detached subtrees in element-removal hooks CVE-2026-75838 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-75838...
CVE-2026-24415
CVE-2026-24415: OpenSTAManager Affected by XSS in modificaiva.php via righe parameter Overview Field| Details ---|--- CVE ID| CVE-2026-24415 Severity| MEDIUM Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products devcode-it/openstamanager versions: " The $GET'righe' parameter is...
RealPlayer_G2_RCE
Real Player v.20.0.8.310 G2 Control 'DoGoToURL' Remote Code Execution Vulnerability Video demo: https://www.youtube.com/watch?v=9c9Q4VZQOUk Real Player G2 Control component contains a remote code execution vulnerability because it allows 'javascript:' URIs to be passed as the argument, which is...
CVE-2025-25296
CVE-2025-25296 Prueba de Concepto POC Descripción Este proyecto demuestra una prueba de concepto POC para la vulnerabilidad CVE-2025-25296 que afecta a Label Studio, una herramienta de etiquetado de datos de código abierto. La vulnerabilidad reside en el endpoint /projects/upload-example, que no...