CVE-2026-2277

The rexCrawler plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' and 'regex' parameters in the search-pattern tester page in all versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for...

ABCD2 Cross-Site Scripting Vulnerability

ABCD2 is an ABCD open source software suite for library and documentation center automation. A cross-site scripting vulnerability exists in ABCD2 2.2.0-beta-1 and earlier versions, which stems from some unknown handling of the file /buscarintegrada.php, where manipulation of the parameter...

CVE-2024-43404: Improper Neutralization of Directives in Dynamically Evaluated Code

MEGABOT is a fully customized Discord bot for learning and fun. The /math command and functionality of MEGABOT versions 1.5.0 contains a remote code execution vulnerability due to a Python eval. The vulnerability allows an attacker to inject Python code into the expression parameter when using...

Genesys Intelligent Workload Distribution SQL injection vulnerability

Genesys Intelligent Workload Distribution Iwd is an application from Genesys, Inc. It can be used with the Genesys Customer Interaction Management Cim platform to assign tasks to the resources best suited to handle them. A SQL injection vulnerability exists in Genesys Intelligent Workload...

PT-2014-2463

Name of the Vulnerable Software and Affected Versions iTop versions 2.0, 1.2.1, 1.2, and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the search feature. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specificall...