508 matches found
CVE-2026-1151 technical-laohu mpay User Center cross site scripting
A weakness has been identified in technical-laohu mpay up to 1.2.4. The affected element is an unknown function of the component User Center. This manipulation of the argument Nickname causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the...
CVE-2026-1151
CVE-2026-1151 affects technical-laohu mpay (User Center) up to version 1.2.4. Manipulating the Nickname argument in an unknown function enables cross-site scripting. The issue can be exploited remotely and public PoCs exist. Remediation: update to version 1.2.4 or later (versions prior to 1.2.4 s...
CVE-2026-1151
A weakness has been identified in technical-laohu mpay up to 1.2.4. The affected element is an unknown function of the component User Center. This manipulation of the argument Nickname causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the...
CVE-2026-1151 technical-laohu mpay User Center cross site scripting
A weakness has been identified in technical-laohu mpay up to 1.2.4. The affected element is an unknown function of the component User Center. This manipulation of the argument Nickname causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the...
mpay code injection vulnerability
MPay is a convenient payment collection tool developed by Technic Laohu in China. Versions of MPay 1.2.4 and earlier had a code injection vulnerability. This vulnerability stemmed from incorrect handling of the parameter “Nickname,” and could lead to cross-site scripting attacks...
PT-2026-3434
Name of the Vulnerable Software and Affected Versions technical-laohu mpay versions up to 1.2.4 Description A flaw exists in the User Center component of technical-laohu mpay. Manipulation of the Nickname argument within an unknown function can lead to cross site scripting. The exploit is publicl...
CVE-2026-1151: Improper Neutralization of Input During Web Page Generation
A weakness has been identified in technical-laohu mpay up to 1.2.4. The affected element is an unknown function of the component User Center. This manipulation of the argument Nickname causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001987)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001987 advisory. Multiple buffer overflows in drivers/staging/wlags49h2/wlpriv.c in the Linux kernel before 3.12 allow local users to cause a denial of service or possibly have...
EUVD-2010-0961
Malware in sbrugna...
EUVD-2013-4037
Malware in sbrugna...
EUVD-2018-8859
Malware in sbrugna...
EUVD-2018-21517
Malware in sbrugna...
EUVD-2020-14089
Malware in sbrugna...
EUVD-2020-11521
Malware in sbrugna...
EUVD-2021-23961
Malware in sbrugna...
EUVD-2021-23634
Malware in sbrugna...
EUVD-2021-14310
Malware in sbrugna...
EUVD-2008-7265
Malware in sbrugna...