ReadyScript e-commerce management system Session Management

The vulnerability of the ReadyScript e-commerce management system is related to improper session management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

YouGile Project Management Code Execution

The vulnerability of the YouGile project management service is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Enlogic SCADA System ENTTEK Code Execution

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability could allow a malicious actor to execute arbitrary codes remotely...

Enlogic SCADA Virtual Controller File Path Traversal

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to incorrect external control using filenames or paths. Exploiting this vulnerability could allow a malicious actor to delete any files at will...

EUVD-2026-109271

OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parsesection and decodename that fails to check resource record lengths against the received message. Attackers controlling or spoofing a queried nameserver can send truncated record headers or RDATA, raisi...

CVE-2026-114694

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.8...

CVE-2026-114697

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Stored XSS.This issue affects QA Analytics: from n/a through 5.3.0.1...

CVE-2026-114695 WordPress VOD Infomaniak plugin <= 1.5.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Stored XSS.This issue affects VOD Infomaniak: from n/a through 1.5.14...

CVE-2026-114694

The Pixelite Events Manager WordPress plugin (versions through 7.4.8 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability due to the Improper Neutralization of Input During Web Page Generation . This flaw allows an attacker to inject malicious scripts into web pages. No specifi...

CVE-2026-114694 WordPress Events Manager plugin <= 7.4.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.8...

EUVD-2026-109256

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.8...

CVE-2026-114697

The WordPress QA Analytics plugin (qa-heatmap-analytics) is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 5.3.0.1 . The root cause is the improper neutralization of input during web page generation. This vulnerability allows an attacker to store malicious scripts...

CVE-2026-114697 WordPress QA Analytics plugin <= 5.3.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Stored XSS.This issue affects QA Analytics: from n/a through 5.3.0.1...

EUVD-2026-109253

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Stored XSS.This issue affects QA Analytics: from n/a through 5.3.0.1...

CVE-2026-112869

The Noah Hearle We’re Open! WordPress plugin is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability (CWE-79) in versions n/a through 2.6 . The flaw stems from the Improper Neutralization of Input During Web Page Generation , which could allow an attacker to execute scripts in a use...

CVE-2026-112869 WordPress We’re Open! plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noah Hearle We’re Open! opening-hours allows Reflected XSS.This issue affects We’re Open!: from n/a through 2.6...

CVE-2026-112844 WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arraytics WP Event Solution wp-event-solution allows Stored XSS.This issue affects WP Event Solution: from n/a through 4.1.26...

CVE-2026-112844

The Arraytics WP Event Solution (wp-event-solution) WordPress plugin versions 4.1.26 and below are susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. This issue is caused by the improper neutralization of input during web page generation. An attacker could potentially exploit this ...

CVE-2021-22204

CVE-2021-22204 Description Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image Script Script Link Script usage: System cmd: bash CVE-2021-2204.sh "system'id'" happy.jpg Reverse shell bash...

CVE-2022-22063

CVE-2022-22063 CVE-2022-22063 is a security issue in the hypervisor firmware of some older Qualcomm chipsets. An unprotected hardware component the "boot remapper" can be abused to gain full read/write access to the hypervisor from a modified operating system privilege escalation. Exploiting the...