CVE-2026-124412

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in eLightUp Slim SEO slim-seo allows Code Injection.This issue affects Slim SEO: from n/a through 4.11.5...

RLSA-2026:98449 Important: containernetworking-plugins security update

The Container Network Interface CNI project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated...

EUVD-2023-60729

OpenMage magento-lts before 20.2.0 contains a stored cross-site scripting vulnerability because the TinyMCE WYSIWYG editor fails to filter scripts in specially crafted HTML tags. Attackers can inject an img element with a malicious onmouseover attribute to execute scripts in the browsers of users...

CVE-2026-126424

OpenEMR versions before 8.5.0 are vulnerable to a stored cross-site scripting (XSS) flaw. The vulnerability exists because users with admin or superbill write permissions can inject malicious HTML into SNOMED code descriptions through the superbill_custom_full.php component. When a clinician sele...

EUVD-2026-125019

OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability that allows users with admin/superbill write permission to inject HTML into SNOMED code descriptions via superbillcustomfull.php. When a clinician selects the malicious code, the Functional and Cognitive Status form or...

EUVD-2026-124980

OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by placing payloads in the patient External ID field. The payload executes when other users open the patient's prescriptions via View Printable Version HTML, running script ...

CVE-2026-126450

OpenEMR versions before 8.5.0 are vulnerable to a stored cross-site scripting (XSS) vulnerability. An authenticated user can inject malicious scripts by placing payloads into the patient External ID field. These scripts execute in the browser sessions of other users who access the patient's presc...

CVE-2026-126945

The Zipline application, prior to version 4.5.1 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw within the HighlightCode component . The root cause is the rendering of unescaped file content before the highlight.js library finishes loading. This allows authenticated attackers to uploa...

EUVD-2026-125120

Zipline before 4.5.1 contains a stored cross-site scripting vulnerability in the HighlightCode component that renders unescaped file content before highlight.js finishes loading. Authenticated attackers can upload text files containing HTML/JavaScript payloads that execute in viewers' browsers,...

CVE-2026-127084

The Teable application, in versions prior to 2026-10-12T12-45-53Z.3331 , is vulnerable to Stored Cross-Site Scripting (XSS) via attachment uploads. The root cause allows authenticated users to upload SVG or HTML attachments using an attacker-chosen content type. Attackers can then direct victims ...

EUVD-2026-125098

Teable before 2026-10-12T12-45-53Z.3331 contains a stored cross-site scripting vulnerability that allows authenticated users to upload SVG or HTML attachments with an attacker-chosen content type. Attackers can send the same-origin /api/attachments/read URL, served inline with an empty...

EUVD-2026-124879

Edito CMS is vulnerable to Stored XSS via content parameter in Tiny editor functionality. Authenticated attacker can inject arbitrary HTML and JS into website, which will be rendered/executed when user tries to edit changed entry. This issue was fixed in version 5.10.2607. Hotfixes for older...

grafana security, bug fix, and enhancement update

An update is available for grafana. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Grafana is an open source, feature rich metrics dashboard and graph editor f...

RLSA-2026:97215 Important: grafana security, bug fix, and enhancement update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVE-2026-33810 crypto/x509: crypto/tls: golang: Go: Denial o...

Swagger-HTML-Injection-CVE-2025-8191

https://example.com/swagger/swagger.html?configURL=https://raw.githubusercontent.com/mayank-s16/Swagger-HTML-Injection-CVE-2025-8191/refs/heads/main/test.json...

pastokrapacefleciks

pastokrapacefleciks, the WireShark - PRO analyzer Usage: Put your .pcapng file into the directory of pastokrapacefleciks python .\pastokrapacefleciks.py python3 .\pastokrapacefleciks.py Check your HTML report...

CVE-2026-11645-Out-of-bounds-Read-Write

CVE-2026-11645 - Chrome V8 Out-of-Bounds Read/Write Exploit ⚠️ WARNING This code is ONLY for educational purposes and authorized testing. 📋 Description CVE-2026-11645 is an out-of-bounds read and write OOB vulnerability in the V8 engine of Google Chrome. A remote attacker can execute arbitrary cod...

httprobe

httprobe Take a list of domains and probe for working http and https servers. Install ▶ go install github.com/tomnomnom/httprobe@latest Basic Usage httprobe accepts line-delimited domains on stdin: ▶ cat recon/example/domains.txt example.com example.edu example.net ▶ cat recon/example/domains.txt...

nmap-bootstrap-xsl

nmap-bootstrap-xsl Have a nice interface for checking the result of your Nmap scans. This software must not be used by military or secret service organisations. How to use 1. New Nmap scan Add the nmap-bootstrap.xsl as stylesheet to your Nmap scan with the --stylesheet argument : nmap -sS -T4 -A...

CSRFER

CSRFER / / | \ | | \ | / /\ --.| |/ / | | | | |/ / | | --. \ /| | | || / | /// / |\ | | | || |\ \ //| \| /| | -.--. " '-, ',' 2 \ \q \ . \ .--' '----. / . . \ .'.' \ .-.\ '-, ,/ .---;- . \ \ .\ // '-. \ \ | '. , '-. c=' Cooo -. '-. '. '-. \ snd '-. '. '-. \ ---' CSRFER is a tool to...