CVE-2026-25154: Improper Neutralization of Input During Web Page Generation

LocalSend is a free, open-source app that allows users to share files and messages with nearby devices over their local network without needing an internet connection. In versions up to and including 1.17.0, when a user initiates a "Share via Link" session, the LocalSend application starts a loca...

EUVD-2016-10265

Malware in sbrugna...

cosyvoice-package (0.0.2), matcha-tts (>=0.0.7.1, <=0.0.7.2) +1 more potentially affected by CVE-2024-47872 via gradio (3.43.2)

gradio PYPI version 3.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cosyvoice-package 0.0.2 - matcha-tts =0.0.7.1, =0.0.7.2 - matcha-tts-package 0.0.1 Source cves: CVE-2024-47872 Source advisory:...

CVE-2024-9283: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in RelaxedJS ReLaXed up to 0.2.2. Affected is an unknown function of the component Pug to PDF Converter. The manipulation leads to cross site scripting. An attack has to be approached locally. The exploit has been disclosed to the public an...

PT-2021-18112

Name of the Vulnerable Software and Affected Versions: Aruba CX 6200F Switch Series versions prior to 10.04.3070 Aruba 6300 Switch Series versions prior to 10.04.3070 Aruba 6400 Switch Series versions prior to 10.04.3070 Aruba 8320 Switch Series versions prior to 10.04.3070 Aruba 8325 Switch Seri...

CVE-2021-29148: Improper Neutralization of Input During Web Page Generation

A local cross-site scripting XSS vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series versions: Aruba AOS-CX firmware: 10.04.xxxx ...

CVE-2016-9459

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution vulnerability potentially leading to a local XSS. The download log functionality in the admin screen is delivering the log in JSON format to the end-user. The file was delivered with an attachment...

CVE-2016-9459

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution vulnerability potentially leading to a local XSS. The download log functionality in the admin screen is delivering the log in JSON format to the end-user. The file was delivered with an attachment...

CVE-2016-9459

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution vulnerability potentially leading to a local XSS. The download log functionality in the admin screen is delivering the log in JSON format to the end-user. The file was delivered with an attachment...

PT-2017-10150

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 9.0.52 ownCloud Server versions prior to 9.0.4 Description The issue concerns a log pollution vulnerability that could potentially lead to a local XSS. The download log functionality in the admin screen...

CVE-2016-9459: Generation of Error Message Containing Sensitive Information

Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution vulnerability potentially leading to a local XSS. The download log functionality in the admin screen is delivering the log in JSON format to the end-user. The file was delivered with an attachment...

Microsoft Internet Explorer MHTML Protocol Handler XSS

No description provided by source. Hacking with mhtml protocol handler Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2011/1/15 References: http://www.80vul.com/mhtml/Hacking%20with%20mhtml%20protocol%20handler.txt Ph4nt0m Webzine 0x05 http://secinn.appspot.com/pstzine Was finally...

Google Mail - Mail Encoding & Filter Validation Vulnerability

Document Title: =============== Google Mail - Mail Encoding & Filter Validation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1051 View: http://www.youtube.com/watch?v=ZQJPgLQ1wcU Release Date: ============= 2013-08-15 Vulnerability Laboratory ID VL-ID:...

Google Mail - Mail Encoding & Filter Validation Vulnerability

Document Title: =============== Google Mail - Mail Encoding & Filter Validation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1051 View: http://www.youtube.com/watch?v=ZQJPgLQ1wcU Release Date: ============= 2013-08-15 Vulnerability Laboratory ID VL-ID:...

CVE-2012-0216: Undefined Security Weakness

The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when modphp or modrivet is used, provides example scripts under the doc/ URI, which might allow local users to conduct cross-site scripting XSS...

Microsoft Internet Explorer - MHTML Protocol Handler Cross-Site Scripting

Microsoft Internet Explorer - MHTML Protocol Handler Cross-Site Scripting Hacking with mhtml protocol handler Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2011/1/15 References: http://www.80vul.com/mhtml/Hacking%20with%20mhtml%20protocol%20handler.txt Ph4nt0m Webzine 0x05...

Microsoft Internet Explorer - MHTML Protocol Handler Cross-Site Scripting

Hacking with mhtml protocol handler Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2011/1/15 References: http://www.80vul.com/mhtml/Hacking%20with%20mhtml%20protocol%20handler.txt Ph4nt0m Webzine 0x05 http://secinn.appspot.com/pstzine Was finally released yesterday, There are two...

Microsoft Internet Explorer MHTML Cross Site Scripting

Hacking with mhtml protocol handler Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2011/1/15 References: http://www.80vul.com/mhtml/Hacking%20with%20mhtml%20protocol%20handler.txt Ph4nt0m Webzine 0x05 http://secinn.appspot.com/pstzine Was finally released yesterday, There are two...

ESupport Multiple HTML Injection Vulnerabilities

ESupport Multiple HTML Injection Vulnerabilities Kayako SupportSuite offers true integrated Multi-Channel solution allowing you to manage your emails, online issues, chats, self service and issues received by phone. The entire system has been designed to improve productivity and provide seamless...