75297 matches found
CVE-2021-40514
CVE-2021-40514 OSCAR McMaster 19.401235 Stored Cross Site Scripting Vulnerability A stored Cross Site Scripting vulnerability exists in multiple pages in version 19.401235 of the OSCAR McMaster application that allows for arbitrary execution of JavaScript commands. Placeholder for CVE mitre...
CVE-2025-56795
CVE-2025-56795 Description Two stored Cross-Site Scripting XSS vulnerabilities were identified in the recipe creation functionality of Mealie , affecting all versions up to and including 3.0.1. Unsanitized user input provided during recipe creation is stored and later rendered in the frontend...
CVE-2025-60374
CVE-2025-60374 CVE-2025-60374: Stored Cross-Site Scripting XSS in Perfex CRM Chatbot ⚠️ Security Advisory A critical Stored Cross-Site Scripting vulnerability in Perfex CRM's chatbot feature 📋 Overview A stored cross-site scripting XSS vulnerability in the chatbot component of Perfex CRM, prior to...
CVE-2025-55580
CVE-2025-55580 - SolidInvoice Stored Cross-Site Scripting XSS in Clients Summary SolidInvoice is vulnerable to a Stored Cross-Site Scripting XSS issue in the Client Module. An authenticated attacker can inject arbitrary JavaScript into the application, which will then execute in users' browsers...
CVE-2024-28397-Js2Py-RCE
CVE-2024-28397-Js2Py-RCE Description This repository contains a Python-based Proof of Concept PoC for CVE-2024-28397, a sandbox escape vulnerability in the Js2Py JavaScript interpreter for Python. When the target application evaluates untrusted JS code via Js2Py, an attacker can break out of the...
jsluice
jsluice jsluice is a Go package and command-line tool for extracting URLs, paths, secrets, and other interesting data from JavaScript source code. If you want to do those things right away: look at the command-line tool. If you want to integrate jsluice's capabilities with your own project: look ...
CVE-2021-23639
Overview md-to-pdf is a CLI tool for converting Markdown files to PDF. Affected versions of this package are vulnerable to Remote Code Execution RCE due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine. Usage: python3 cve-2021-23639.py targerurl...
cve-2024-21683-rce
cve-2024-21683-rce CVE-2024-21683 is a critical remote code execution RCE vulnerability affecting Atlassian's Confluence Server and Data Center. This vulnerability has a CVSS score of 8.3, placing it in the high-severity category. Attackers can exploit this vulnerability to execute remote code by...
svg-sanitizer
SVG Sanitizer SVG Sanitizer is a Java library designed to clean SVG files by removing potentially dangerous JavaScript, blocking external resource loading, and preventing XSS Cross-Site Scripting vulnerabilities. It is useful for ensuring that SVG files are safe to use in a variety of application...
CVE-2026-118014
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Thunderbird 159...
CVE-2026-118026
Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159...
CVE-2026-118007
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Thunderbird 159...
CVE-2026-117994
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
CVE-2026-117982
Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
CVE-2026-117946
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
CVE-2026-117955
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
CVE-2026-117942
Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...
CVE-2026-117969
Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...