4290 matches found
EUVD-2026-97723
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows DOM-Based XSS.This issue affects Quiz And Survey Master: from n/a through 11.2.7...
CVE-2026-107862 WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows DOM-Based XSS.This issue affects Quiz And Survey Master: from n/a through 11.2.7...
CVE-2025-55182-GodzillaMemoryShell
CVE-2025-55182-GodzillaMemoryShell help usage: exploit.py -h --proxy PROXY --utf16 --unicode --key KEY --target TARGET CVE-2025-55182 Godzilla Memoryshell options: -h, --help show this help message and exit --proxy PROXY HTTP proxy address, e.g. http://127.0.0.1:8888 --utf16 Enable UTF-16 encodin...
CVE-2026-103527
Thelia v2.6.0's Smarty templates address.html and address-update.html fail to properly escape double quotes in the “next” parameter, enabling reflected Cross‑Site Scripting XSS when an authenticated user visits the malicious link containing attacker‑controlled JavaScript...
CVE-2026-103523
Thelia v2.6.0 contains an open redirect vulnerability in its address creation workflow. After a user accesses a crafted URL and successfully submits the “Add New Address” form, the application redirects them to the URL specified in the next parameter. Because the application does not validate...
EUVD-2026-97479
Thelia v2.6.0's Smarty templates address.html and address-update.html fail to properly escape double quotes in the “next” parameter, enabling reflected Cross‑Site Scripting XSS when an authenticated user visits the malicious link containing attacker‑controlled JavaScript...
CVE-2026-103527
Thelia v2.6.0 is vulnerable to reflected Cross-Site Scripting (XSS) due to improper escaping of double quotes in the “next” parameter within the Smarty templates (address.html and address-update.html ). An authenticated user can be tricked into visiting a malicious link containing attacker-contro...
CVE-2026-103523 CVE-2026-103523
Thelia v2.6.0 contains an open redirect vulnerability in its address creation workflow. After a user accesses a crafted URL and successfully submits the “Add New Address” form, the application redirects them to the URL specified in the next parameter. Because the application does not validate...
EUVD-2026-97476
Thelia v2.6.0 contains an open redirect vulnerability in its address creation workflow. After a user accesses a crafted URL and successfully submits the “Add New Address” form, the application redirects them to the URL specified in the next parameter. Because the application does not validate...
CVE-2026-103523
Thelia v2.6.0 is susceptible to an open redirect vulnerability within its address creation workflow. The issue occurs because the application fails to validate the destination URL provided in the next parameter after a user submits the “Add New Address” form. Consequently, an attacker can provide...
CVE-2024-21762
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2024-21762...
ROOT-APP-NPM-GHSA-2XP9-VWFH-VXW4 GHSA-2xp9-vwfh-vxw4 in next - Patched by Root
Root has patched GHSA-2xp9-vwfh-vxw4 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64646 CVE-2026-64646 in next - Patched by Root
Root has patched CVE-2026-64646 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-75604 CVE-2026-75604 in next - Patched by Root
Root has patched CVE-2026-75604 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64644 CVE-2026-64644 in next - Patched by Root
Root has patched CVE-2026-64644 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64648 CVE-2026-64648 in next - Patched by Root
Root has patched CVE-2026-64648 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-VCVR-R3JV-PC5J GHSA-vcvr-r3jv-pc5j in next - Patched by Root
Root has patched GHSA-vcvr-r3jv-pc5j in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64647 CVE-2026-64647 in next - Patched by Root
Root has patched CVE-2026-64647 in the next package for Root:npm. Multiple fixed versions available...