RHEL 9 : grafana-pcp (RHSA-2026:67159)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67159 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and...

CVE-2024-33209

CVE-2024-33209 FlatPress 1.3. es vulnerable a Cross Site Scripting XSS. Un atacante puede inyectar código JavaScript malicioso en la sección "Agregar nueva entrada", lo que le permite ejecutar código arbitrario en el contexto del navegador web de la víctima. Tipo de vulnerabilidad: Cross Site...

CVE-2026-90602

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

CVE-2026-90604 Totolink A3002MU Anchor Tag cross site scripting

A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. This affects an unknown part of the component Anchor Tag Handler. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and ma...

CVE-2026-90604

A cross-site scripting (XSS) flaw exists in the Anchor Tag Handler component of the Totolink A3002MU router running firmware Hh-B20211125.1046 . The vulnerability is remotely exploitable and requires low privileges plus user interaction. A proof-of-concept exploit has been released to the public ...

cve-2019-10070-apache-atlas-xss

This repository does not have a README...

ensimag-secu3a-cve-2024-22416

CVE-2024-22416 Informe de referencia: GHSA-pgpj-v85q-h5fm Este repositorio contiene una configuración de docker compose que configura tanto un servidor pyLoad como un servidor atacante que solo proporciona un csrf.html. Para probarlo usted mismo, simplemente ejecute docker composer up necesita...

CVE-2026-90602 Anil-matcha Open-Generative-AI Studio Components ImageStudio.js renderHistory cross site scripting

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

CVE-2026-90602

A cross-site scripting (XSS) vulnerability affects the renderHistory function in ImageStudio.js within the Studio Components component of Anil-matcha Open-Generative-AI (versions up to 1.0.11/2.0.0). The attack can be initiated remotely and requires low privileges and user interaction , resulting...

CVE-2026-90602 Anil-matcha Open-Generative-AI Studio Components ImageStudio.js renderHistory cross site scripting

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

CVE-2026-90599

A flaw has been found in Rizwan17 inventory-management-system up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. This affects an unknown function of the file includes/process.php. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely. The explo...

CVE-2026-90599 Rizwan17 inventory-management-system process.php cross-site request forgery

A flaw has been found in Rizwan17 inventory-management-system up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. This affects an unknown function of the file includes/process.php. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely. The explo...

CVE-2024-42008-9-exploit

CVE-2024-42008-9-exploit Los scripts en este repositorio están diseñados para explotar CVE-2024-42008 y CVE-2024-42009. Ambas son vulnerabilidades encontradas en Roundcube 1.6.7. Lea más sobre estas CVEs y cómo pueden ser explotadas en el siguiente enlace: root@kitploit:...

CVE-2026-90583

A security flaw has been discovered in kagisearch smallweb up to 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf. The affected element is the function index of the file app/sw.py of the component Query String Rendering. Performing a manipulation of the argument qs results in cross site scripting. The...

CVE-2026-90583 kagisearch smallweb Query String Rendering sw.py index cross site scripting

A security flaw has been discovered in kagisearch smallweb up to 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf. The affected element is the function index of the file app/sw.py of the component Query String Rendering. Performing a manipulation of the argument qs results in cross site scripting. The...

CVE-2026-90583

A cross-site scripting (XSS) flaw exists in kagisearch smallweb (up to commit 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf) in the index function of app/sw.py within the Query String Rendering component. Manipulating the qs argument injects untrusted content into the rendered page. Exploitation requi...

CVE-2020-12625

CVE-2020-12625: Cross-Site Scripting mediante adjunto HTML malicioso en Roundcube Webmail Existe una vulnerabilidad de Cross-Site Scripting XSS en las versiones de Roundcube anteriores a 1.4.4, 1.3.11 y 1.2.10. Al aprovechar el elemento XML "" en un correo con un adjunto "text/html", un atacante...

CVE-2025-11926

CVE-2025-11926 Wordpress-Related-Posts-Lite-plugin-XSS-PoC for PoC: https://github.com/prabhatverma47/Wordpress-Related-Posts-Lite-plugin-XSS-PoC...

CVE-2026-90571

A vulnerability was found in Exrick xmall up to 19e7917d5ed3bd2a2421a3a246ad494c133ba94c. Impacted is an unknown function of the file xmall-manager-web/src/main/webapp/WEB-INF/jsp/order-print.jsp of the component Order Printing. Performing a manipulation results in cross site scripting. Remote...

CVE-2026-90570

A vulnerability has been found in linlinjava litemall 1.4.0/1.5.0/1.6.0/1.7.0/1.8.0. This issue affects the function AdminGoodsService.validate of the file litemall-vue/src/views/items/detail/index.vue of the component Product Detail. Such manipulation of the argument detail leads to cross site...