CVE-2026-78071

DPCalendar Free의 위치 제목을 통한 저장형 XSS DPCalendar Free ≤ 10.11.2 — 작성자 권한 사용자가 콘텐츠 검토를 우회하여 위치 제목을 통해 지속형 XSS를 주입, 모든 방문자의 마우스 호버 시 트리거 -orange 요약 $location-title 필드는 defaultlocations.php에서 htmlspecialchars 없이 렌더링됩니다. Joomla의 서버 측 InputFilter::clean은 문자열 필드에서 를 제거하지만 "는 허용하므로, 작성자Author 권한 사용자가 HTML ...

CVE-2023-49088: Improper Neutralization of Input During Web Page Generation

Cacti is an open source operational monitoring and fault management framework. The fix applied for CVE-2023-39515 in version 1.2.25 is incomplete as it enables an adversary to have a victim browser execute malicious code when a victim user hovers their mouse over the malicious data source path in...

Jeecg-Boot Cross-Site Scripting Vulnerability

Jeecg-Boot is a low-code platform based on the code generator from the JeecgBoot community. Jeecg-Boot 3.0 has a security vulnerability that stems from a cross-site script in /jeecg-boot/jmreport/view that causes a mouse hover event. No details of the vulnerability are currently available...

Jeecg-Boot 跨站脚本漏洞

Jeecg-Boot is a low-code platform based on the code generator from the JeecgBoot community. Jeecg-Boot 3.0 has a security vulnerability that stems from a cross-site script in /jeecg-boot/jmreport/view that causes a mouse hover event. No details of the vulnerability are currently available...

Microsoft Windows - JPEG Processing Buffer Overrun (MS04-028)

Microsoft Windows - JPEG Processing Buffer Overrun MS04-028 !/bin/sh The JPEG vuln is triggered by the 0 or 1 length field with an integer flaw The crafted JPEG header makes Windows crash a couple of different ways 1 First, it crashes when the image is opened. 2 Second, it crashes when hovering t...