CVE-2026-82773

Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82773

Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

EUVD-2026-77226

Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82773

A cross-site scripting (XSS) vulnerability affects CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series devices. When exploited, an arbitrary script may be executed in a logged-in user's web browser. The CNA (jpcert.or.jp) rates this MEDIUM severity (CVSS 3.1: 6.1, CVSS 4.0: 5.1), not...

CVE-2026-82771

Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82771

Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

EUVD-2026-77224

Cross-site scripting vulnerability exists in Contec EC1000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82771

A cross-site scripting (XSS) vulnerability affects the Contec EC1000 series , allowing an arbitrary script to be executed in a logged-in user's web browser. The CVSS 3.1 score is 5.4 (Medium) with changed scope , indicating cross-origin impact on subsequent system confidentiality and integrity. E...

EUVD-2026-77221

Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82769

Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82769

Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82769

A cross-site scripting (XSS) vulnerability affects the Contec RP-WAH-SR Series . If exploited, an arbitrary script may be executed in the web browser of a logged-in user . The CNA-assigned CVSS 3.1 score is 5.4 (MEDIUM) with a changed scope and low confidentiality/integrity impact, while the CVSS...

CVE-2026-82767

Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82767

Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

EUVD-2026-77220

Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82767

CVE-2026-82767 is a cross-site scripting (XSS) vulnerability in SGA1000 , a product associated with CONTEC (as indicated by the vendor security advisory reference). When exploited, an arbitrary script may be executed on a logged-in user's web browser. The attack vector is adjacent network with no...

CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE

CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE Introducción a CVE-2022-22947 root@kitploit: 危害等级：高危 POC/EXP情况：已公开 CNVD编号：CNNVD-2022-16402 影响范围： Spring Cloud GateWay 3.1.0 Spring Cloud GateWay =3.0.0，=3.0.6 Spring Cloud GateWay 3.0.0 Descripción de la vulnerabilidad Spring Cloud Gateway tiene una...

mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 セキュリティ研究ラボ CVE-2025-14847 | CVSS 8.7 High | 認証なしメモリ開示 CVE-2025-14847 は MongoBleed と呼ばれ、MongoDB の zlib 伸張ロジックを悪用することで、認証されていないリモート攻撃者が初期化されていないヒープメモリを漏えいさせることを可能にします。この高深刻度の脆弱性は、平文の認証情報やセッショントークンなどの機密情報を露出させ、横展開とサーバー完全乗っ取りへのロードマップを提供します。 📖 完全なドキュメント → エンジニア向け TL;DR 項目...

vi-bot

BotDetect v2 — 本番環境向けボット検出ライブラリ 重み付けスコアリング、行動分析、ブラウザフィンガープリンティング、設定可能なしきい値を備えたクライアントサイドのボットおよび自動化検出ライブラリ。ヘッドレスブラウザ、Selenium、Puppeteer、Playwright、CDPベースのツール、ステルス自動化フレームワークを検出します。 v2.1.0 — アンチ検出ハニーポット、GPU安定なキャンバスフィンガープリンティング、強化された行動分析、遅延初期化、サーバーサイド改ざん検出、リクエストフィンガープリントバインディング、レート制限。 目次 機能 アーキテクチャ...

CVE-2025-63498

Alinto/SOGo の Cookie における格納型 XSS 研究者: Daniil Khomichenok, Alexander Klimenko 影響を受けるバージョン var cookieUsername = "[email protected]'123'"; var language = 'English'; var loginHint = '' XSS インジェクションをパラメータ値として受け入れる、ログイン記憶の Set-Cookie のコード: root@kitploit: if rememberLogin response addCookie:...