CVE-2026-90850

CVE-2026-90850 affects PHPGurukul Hostel Management System 3.0 , specifically an unspecified function in the file /admin/manage-students.php . The vulnerability enables cross-site scripting (XSS) via remote manipulation. Exploitation requires high privileges (authenticated admin-level access) and...

CVE-2026-91773

Soft Serve (a self-hosted Git server) versions 0.7.1 through 0.11.6 are affected by an information disclosure flaw in Git LFS lock queries , which are not scoped by repository. An authenticated user with write access to any repository can enumerate lock IDs globally, recovering locked file paths,...

CVE-2026-90845

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2015-7214

CVE-2015-7214 Что такое CVE-2015-7214? Пожалуйста, посмотрите следующую ссылку. Атака межсайтового чтения через URI data и view-source Содержимое www/index.html PoC обхода SOP для веб local/index.html PoC обхода SOP для локального Требования Firefox версии 42.0 или более ранней Ниже приведены...

CVE-2026-90848

Governikus AusweisApp versions up to 2.5.4 are affected by a cross-site scripting (XSS) vulnerability in the StartPAOSResponse Handler component. The root cause is the manipulation of the ResultMessage argument, allowing a remote attacker to execute script in the context of the application. The a...

CVE-2026-90848 Governikus AusweisApp StartPAOSResponse cross site scripting

A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5...

EUVD-2026-78245

A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5...

Exploite-CVE-2023-30212-vulnerability

Créer un environnement Docker vulnérable à CVE-2023-30212 Description Environnement Docker et exploitation de la vulnérabilité CVE-2023-30212. CVE-2023-30212 est une vulnérabilité de sécurité qui affecte les versions d'OURPHP antérieures ou égales à 7.2.0. Cette vulnérabilité permet des attaques ...

CVE-2023-30212

CVE-2023-30212 Environnement Docker et exploit de la CVE-2023-30212 est une vulnérabilité de sécurité qui affecte les versions d'OURPHP antérieures ou égales à 7.2.0 .Cette vulnérabilité permet des attaques de Cross-Site Scripting XSS...

EUVD-2026-78221

A flaw has been found in michaelliao itranswarp up to 2.19. The impacted element is the function Markdown.toHtml of the file Markdown.java of the component Page Content Rendering. This manipulation causes cross site scripting. The attack may be initiated remotely. The exploit has been published a...

CVE-2026-90845

CVE-2026-90845 is a cross-site scripting (XSS) flaw in PHPGurukul Daily Expense Tracker System 1.1 , specifically in the file /dets/includes/sidebar.php . Manipulating the FullName argument allows a remote attacker with low privileges to execute script in a victim's browser, requiring user intera...

EUVD-2026-78231

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2026-90845 PHPGurukul Daily Expense Tracker System sidebar.php cross site scripting

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2026-88742

Bacularis (versions 1.0.0 through 6.5.0) is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability in the client address field . An attacker who can inject script into this field may execute arbitrary JavaScript in the context of other users' sessions. No confirmed in-the-wild exploitat...

EUVD-2026-78940

BharatMLStack up to and including 1.3.0 is vulnerable to Cross Site Scripting XSS via the component Trufflebox UI trufflebox-ui in ExpressionViewModal.jsx...

CVE-2026-39040

BharatMLStack (versions up to and including 1.3.0 ), maintained by Meesho on GitHub, is vulnerable to Cross-Site Scripting (XSS) in the Trufflebox UI component, specifically in the file ExpressionViewModal.jsx . A security writeup is available at wincr4ck/security-advisories . No CVSS metrics, ex...

PT-2026-91827

A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5...

PT-2026-93164

Integer overflow in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

PT-2026-91845

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-39038

BharatMLStack up to and including v1.3.0 is affected by a Cross-Site Scripting (XSS) vulnerability in the Trufflebox UI component (trufflebox-ui), specifically in GenericNumerixTable.jsx . The CVSS 3.1 score is 6.1 (Medium) with a changed scope, indicating low impact to confidentiality and integr...