1627 matches found
TitanNit Web Control 2.01/Atemio 7600 - Remote Code Execution
The device contains a command injection caused by the 'getcommand' query in the application, letting unauthorized attackers execute system commands with root privileges, exploit requires attacker to send crafted requests. id: CVE-2024-9166 info: name: TitanNit Web Control 2.01/Atemio 7600 - Remot...
CVE-2026-16581
creationtimestamp| type| source ---|---|--- 2026-07-28 16:51:38+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-06 2026-07-28 17:04:20+00:00| seen| https://bsky.app/profile/cerberusit.bsky.social/post/3mrpve6p6qi23 2026-07-28 17:04:22+00:00| seen|...
CVE-2025-37917
creationtimestamp| type| source ---|---|--- 2026-07-28 16:18:42+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...
VulnCheck KEV: CVE-2026-8496
A cross-site scripting XSS vulnerability exists in Alinto SOGo, version 5.12.7. A maliciously crafted ICS calendar invitation files allows arbitrary JavaScript execution within the authenticated SOGo webmail session. The issue occurs because SVG content embedded in the description field of an ICS...
CVE-2026-8312
creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:32+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01 2026-07-21 08:50:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gi7fnva2p 2026-07-25 10:51:50+00:00| seen|...
CVE-2026-61378
creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:23+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04...
CVE-2026-60073
creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:21+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04...
CVE-2026-59516 WordPress ICS Calendar plugin <= 12.1.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Room 34 Creative Services, LLC ICS Calendar ics-calendar allows Reflected XSS.This issue affects ICS Calendar: from n/a through = 12.1.1...
CVE-2026-9838
The ICS Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'htmltagtitle' parameter in all versions up to, and including, 12.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...
EUVD-2026-42852
The ICS Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'htmltagtitle' parameter in all versions up to, and including, 12.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...
USN-8504-1: SOGo vulnerabilities
It was discovered that SOGo did not properly sanitize categories used for events, tasks, and contacts. A remote authenticated attacker could possibly use this issue to perform cross-site scripting attacks. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu...
CVE-2026-56415
creationtimestamp| type| source ---|---|--- 2026-07-01 02:26:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhptlyfo2i 2026-07-01 02:36:58+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-181-06 2026-07-01 22:03:22+00:00| seen|...
CVE-2026-12578
creationtimestamp| type| source ---|---|--- 2026-06-25 17:15:41+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-06 2026-06-30 10:13:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpirdnqj2d2f...
CVE-2026-44622
creationtimestamp| type| source ---|---|--- 2026-06-25 17:15:21+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-02 2026-06-25 22:01:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5gkqc4w42u...
CVE-2026-50245
creationtimestamp| type| source ---|---|--- 2026-06-11 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-162-03 2026-06-11 16:19:00+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mnzmvvg32p2f 2026-06-11 20:19:51+00:00| seen|...
CVE-2026-42951
creationtimestamp| type| source ---|---|--- 2026-05-28 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-01...
CVE-2017-8310
creationtimestamp| type| source ---|---|--- 2026-05-26 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-146-05...
CVE-2017-8311
creationtimestamp| type| source ---|---|--- 2026-05-26 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-146-05...
CVE-2026-48223
Open ISES Tickets prior to 3.44.2 is affected by a reflected XSS in ics213rr.php. An authenticated attacker can send an unsanitized frm_add_str POST value that is echoed into a hidden HTML input value attribute, causing arbitrary JavaScript to execute in the victim’s browser when the page renders...