golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering

A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting XSS attacks, where...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

Important: Red Hat Security Advisory: grafana-pcp security update

An update for grafana-pcp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

Important: Red Hat Security Advisory: delve security update

An update for delve is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

Important: Red Hat Security Advisory: grafana-pcp security update

An update for grafana-pcp is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

Important: Red Hat Security Advisory: delve security update

An update for delve is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

Important: Red Hat Security Advisory: grafana-pcp security update

An update for grafana-pcp is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2025-14340

XSS to Admin account takeover CVE-2025-14340 A Cross-Site Scripting vulnerability in Payara’s Administration Rest Interface, allows execution of attacker-controlled JavaScript leading to admin account take over. Because of: 1. The panel uses HTTP Basic Auth credentials are sent automatically by t...

CVE-2026-10104-POC

CVE-2026-10104：Product Video Gallery for WooCommerce 存储型跨站脚本漏洞 摘要 详情| 值 ---|--- CVE 编号| CVE-2026-10104 插件| Product Video Gallery for WooCommerce 供应商| TechnoSoft Webs NikHiL Gadhiya 类型| 存储型跨站脚本（Stored Cross-Site Scripting, XSS） CWE| CWE-79 — 网页生成过程中输入未充分中和 CVSS 3.1| 4.4（中危） 受影响版本| ≤ 1.5.1.6 修复版本|...

CVE-2021-45744

CVE-2021-45744 Título del Exploit: Bludit 3.13.1 - Cross Site Scripting Almacenado XSS en el Campo TAGS Autor del Exploit: SANU P.L CVE: CVE-2021-45744 CVSS: 5.4 MEDIO Referencias: https://www.plsanu.com/bludit-3-13-1-tags-field-stored-cross-site-scripting-xss...

CVE-2026-43735

CVE-2026-43735 WebKit 跨域信息泄露。Safari = 26.5.2: PATCHED NavigateEvent.sourceElement is null 原理 父页用 触发跨域 iframe 的片段导航时，iframe 收到的 NavigateEvent.sourceElement 是父页那个 元素，sourceElement.ownerDocument 就是父页的整个 Document。于是跨域 iframe 能读（querySelector....textContent）、能改（改 DOM / 改表单 action）、甚至注入 在父域执行...

RscScan-cve-2025-55182

RscScan - Next.js Server Actions 漏洞扫描器 专业的跨平台 Next.js Server Actions RCE 漏洞扫描工具 功能 • 安装 • 使用 • 视频演示 • 截图 ⚠️ 法律免责声明 本工具仅用于教育和授权的安全测试目的。 ❌ 请勿 在您不拥有或未获得明确书面许可的系统上使用此工具 ❌ 请勿 将此工具用于恶意目的 ✅ 请 仅在授权的渗透测试任务中使用此工具 ✅ 请 仅将此工具用于教育研究和学习 未经授权访问计算机系统是违法的。 滥用此工具可能会根据《计算机欺诈和滥用法案》（CFAA）及全球类似法律导致刑事起诉。...

CVE-2024-40507

CVE-2024-40507 Vulnerabilidad de Cross Site Scripting en openPetra v.2023.02 a través de la función serverMPersonnel.asmx. Descripción : Un usuario no autenticado puede robar las cookies de un usuario autenticado explotando un XSS en openPetra v.2023.02 a través de la función serverMPersonnel.asm...

CVE-2026-51565

CVE-2026-51565 Aviso de seguridad para CVE-2026-51565 Descripción Vulnerabilidad de cross-site scripting XSS en Modules/Docs/DocsController.php en Milk admin =0.9.8 que permite a atacantes remotos inyectar script web o HTML arbitrario a través del parámetro action en una solicitud manipulada...

CVE-2023-46974

CVE-2023-46974 POC Descripción Vulnerabilidad de Cross-Site Scripting en Best Courier Management System v.1.000 permite a un atacante remoto ejecutar código arbitrario a través de un payload manipulado en el parámetro page de la URL. Tipo de Vulnerabilidad Cross-Site Scripting XSS Proveedor del...

CVE-2026-90615

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Such manipulation of the argument subject leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed...