Lucene search
+L

4 matches found

NVD
NVD
•added 2026/09/25 2:17 p.m.•12 views

CVE-2026-100176

The AIL Framework's username timeline feature is vulnerable to stored cross-site scripting XSS. Usernames imported from chats and crawled forums are stored without character restrictions. When an authenticated analyst views the username timeline, the application renders these stored usernames int...

8.5CVSS0.00354EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•5 views

CVE-2026-100176: Improper Neutralization of Input During Web Page Generation

The AIL Framework's username timeline feature is vulnerable to stored cross-site scripting XSS. Usernames imported from chats and crawled forums are stored without character restrictions. When an authenticated analyst views the username timeline, the application renders these stored usernames int...

8.5CVSS6.1AI score0.00354EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•2 views

PT-2026-98847

Name of the Vulnerable Software and Affected Versions AIL Framework affected versions not specified Description The username timeline feature is susceptible to stored cross-site scripting XSS. Usernames imported from chats and crawled forums are stored without character restrictions. When an...

8.5CVSS6AI score0.00354EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/08/19 12:00 a.m.•13 views

Mermaid 安全漏洞

Mermaid is a mermaid-js open source application. Creates diagrams and visualizations using text and code. A security vulnerability exists in Mermaid 11.9.0 and earlier versions, which stems from user-entered architecture diagram icons being passed to the d3 html method, potentially leading to...

6.1CVSS6.3AI score0.00372EPSS
SaveExploits1References4
Rows per page
Query Builder