CVE-2026-35016

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in search.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the frmquery POST parameter directly into an HTML input field VALUE attribute. Attackers...

CVE-2026-26273

Known is a social publishing platform. Prior to 1.6.3, a Critical Broken Authentication vulnerability exists in Known 1.6.2 and earlier. The application leaks the password reset token within a hidden HTML input field on the password reset page. This allows any unauthenticated attacker to retrieve...

cuartango-son.txt

The Son of Cuartango Hole http://pages.whowhere.com/computers/cuartangojc/son1.html Affected software Microsoft Internet Explorer 4.01 Fixes Microsoft has released a fix : Microsoft Security Site http://www.microsoft.com/security/bulletins/ms98-015.asp Microsoft names the vulnerability as...