1126672 matches found
CVE-2023-51769
Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages...
EUVD-2023-60648
A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520...
CVE-2024-23176
An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss URL, the i18n key massmessage-form-page-help allows XSS...
About the security content of Safari 27
About the security content of Safari 27 This document describes the security content of Safari 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
RHEL 9 : grafana-pcp (RHSA-2026:67132)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67132 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and...
RHEL 9 : grafana-pcp (RHSA-2026:67159)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67159 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and...
CVE-2024-33209
CVE-2024-33209 FlatPress 1.3. 存在跨站脚本漏洞（XSS）。攻击者可以在“添加新条目”部分注入恶意的 JavaScript 代码，从而允许他们在受害者 Web 浏览器的上下文中执行任意代码。 漏洞类型： 跨站脚本（XSS） 产品供应商： flatpress CMS 受影响的产品代码库： Flatpress v1.3 - 将在 FlatPress 1.3 版本中修复。 受影响组件 管理面板中的“添加新条目”功能 攻击类型： 远程 影响： 利用此漏洞的攻击者可以向 FlatPress CMS 注入恶意代码，从而导致各种恶意活动，例如窃取用户会话令牌、cookie...
CVE-2026-90602
A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...
CVE-2026-90604 Totolink A3002MU Anchor Tag cross site scripting
A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. This affects an unknown part of the component Anchor Tag Handler. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and ma...
CVE-2026-90604
A cross-site scripting (XSS) flaw exists in the Anchor Tag Handler component of the Totolink A3002MU router running firmware Hh-B20211125.1046 . The vulnerability is remotely exploitable and requires low privileges plus user interaction. A proof-of-concept exploit has been released to the public ...
cve-2019-10070-apache-atlas-xss
此存储库没有 README。...
CVE-2026-90602
A cross-site scripting (XSS) vulnerability affects the renderHistory function in ImageStudio.js within the Studio Components component of Anil-matcha Open-Generative-AI (versions up to 1.0.11/2.0.0). The attack can be initiated remotely and requires low privileges and user interaction , resulting...
CVE-2026-90602 Anil-matcha Open-Generative-AI Studio Components ImageStudio.js renderHistory cross site scripting
A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...
CVE-2026-90602 Anil-matcha Open-Generative-AI Studio Components ImageStudio.js renderHistory cross site scripting
A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...
CVE-2024-42008-9-exploit
CVE-2024-42008-9-exploit 本仓库中的脚本用于利用 CVE-2024-42008 和 CVE-2024-42009。这两个 CVE 都是 Roundcube 1.6.7 中发现的漏洞。 通过以下链接了解更多关于这些 CVE 及其利用方式的信息： root@kitploit: https://www.sonarsource.com/blog/government-emails-at-risk-critical-cross-site-scripting-vulnerability-in-roundcube-webmail/ JavaScript 代码会读取受害者收件箱中...
CVE-2026-90583
A security flaw has been discovered in kagisearch smallweb up to 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf. The affected element is the function index of the file app/sw.py of the component Query String Rendering. Performing a manipulation of the argument qs results in cross site scripting. The...
CVE-2026-90583 kagisearch smallweb Query String Rendering sw.py index cross site scripting
A security flaw has been discovered in kagisearch smallweb up to 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf. The affected element is the function index of the file app/sw.py of the component Query String Rendering. Performing a manipulation of the argument qs results in cross site scripting. The...
CVE-2026-90583
A cross-site scripting (XSS) flaw exists in kagisearch smallweb (up to commit 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf) in the index function of app/sw.py within the Query String Rendering component. Manipulating the qs argument injects untrusted content into the rendered page. Exploitation requi...
CVE-2020-12625
CVE-2020-12625：通过 Roundcube Webmail 中的恶意 HTML 附件实现跨站脚本（XSS） 在 Roundcube 1.4.4、1.3.11 和 1.2.10 之前的版本中存在一个跨站脚本（XSS）漏洞。 通过利用带有 "text/html" 附件的邮件中的 "" XML 元素，攻击者可以在受害者点击恶意电子邮件时绕过 Roundcube 脚本过滤器，并在其浏览器中执行任意恶意 JavaScript。 厂商披露： 该漏洞的厂商披露和修复信息可在此处查看。 前提条件： 此漏洞需要： 等待 Roundcube 用户打开包含 XSS 的邮件 概念验证：...