CVE-2026-57196

Asterisk, an open source telephony toolkit, is vulnerable to reflected cross-site scripting (XSS) in phone provisioning HTTP error pages prior to versions 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3 . An unauthenticated attacker could potentially retrieve an a...

CVE-2026-57196 Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unauthenticated attacker may use reflected cross-site scripting in phone provisioning HTTP error pages to retrieve an...

EUVD-2022-53466

Malicious code in bioql PyPI...

CVE-2022-32269

In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages displayed by Internet Explorer core. This leads to arbitrary code execution...

CVE-2022-32269

In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages displayed by Internet Explorer core. This leads to arbitrary code execution...

CVE-2022-32269: Improper Neutralization of Input During Web Page Generation

In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages displayed by Internet Explorer core. This leads to arbitrary code execution...