Lucene search
+L

364 matches found

RedhatCVE
RedhatCVE
added 2026/01/20 11:23 a.m.17 views

CVE-2026-1151

A weakness has been identified in technical-laohu mpay up to 1.2.4. The affected element is an unknown function of the component User Center. This manipulation of the argument Nickname causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the...

5.4CVSS3.3AI score0.00196EPSS
SaveExploits1References1
NVD
NVD
added 2026/01/19 11:15 a.m.11 views

CVE-2026-1151

A weakness has been identified in technical-laohu mpay up to 1.2.4. The affected element is an unknown function of the component User Center. This manipulation of the argument Nickname causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the...

5.4CVSS0.00196EPSS
SaveExploits1References4
OSV
OSV
added 2026/01/19 11:15 a.m.7 views

CVE-2026-1151

A weakness has been identified in technical-laohu mpay up to 1.2.4. The affected element is an unknown function of the component User Center. This manipulation of the argument Nickname causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the...

5.4CVSS4.1AI score0.00196EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/01/19 11:02 a.m.4 views

CVE-2026-1151

A weakness has been identified in technical-laohu mpay up to 1.2.4. The affected element is an unknown function of the component User Center. This manipulation of the argument Nickname causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the...

5.4CVSS3.8AI score0.00196EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2026/01/19 11:02 a.m.32 views

CVE-2026-1151 technical-laohu mpay User Center cross site scripting

A weakness has been identified in technical-laohu mpay up to 1.2.4. The affected element is an unknown function of the component User Center. This manipulation of the argument Nickname causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the...

4.8CVSS0.00196EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/01/19 11:02 a.m.5 views

CVE-2026-1151 technical-laohu mpay User Center cross site scripting

A weakness has been identified in technical-laohu mpay up to 1.2.4. The affected element is an unknown function of the component User Center. This manipulation of the argument Nickname causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the...

4.8CVSS3.9AI score0.00196EPSS
SaveExploits1References4
CVE
CVE
added 2026/01/19 11:02 a.m.37 views

CVE-2026-1151

CVE-2026-1151 affects technical-laohu mpay (User Center) up to version 1.2.4. Manipulating the Nickname argument in an unknown function enables cross-site scripting. The issue can be exploited remotely and public PoCs exist. Remediation: update to version 1.2.4 or later (versions prior to 1.2.4 s...

5.4CVSS3.9AI score0.00196EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/19 12:00 a.m.22 views

PT-2026-3434

Name of the Vulnerable Software and Affected Versions technical-laohu mpay versions up to 1.2.4 Description A flaw exists in the User Center component of technical-laohu mpay. Manipulation of the Nickname argument within an unknown function can lead to cross site scripting. The exploit is publicl...

5.4CVSS3.2AI score0.00196EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2026/01/19 12:00 a.m.13 views

mpay code injection vulnerability

MPay is a convenient payment collection tool developed by Technic Laohu in China. Versions of MPay 1.2.4 and earlier had a code injection vulnerability. This vulnerability stemmed from incorrect handling of the parameter “Nickname,” and could lead to cross-site scripting attacks...

5.4CVSS5.7AI score0.00196EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:00 a.m.5 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001987)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001987 advisory. Multiple buffer overflows in drivers/staging/wlags49h2/wlpriv.c in the Linux kernel before 3.12 allow local users to cause a denial of service or possibly have...

4.7CVSS8.2AI score0.00587EPSS
SaveExploits1References21
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2007-5242

Malware in sbrugna...

7.5CVSS6.4AI score0.03506EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2020-11521

Malware in sbrugna...

5.4CVSS5.5AI score0.00603EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2004-1788

Malware in sbrugna...

4.3CVSS6.4AI score0.01177EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-23961

Malware in sbrugna...

5.4CVSS5.5AI score0.00527EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2007-4813

Malware in sbrugna...

7.5CVSS6.4AI score0.03696EPSS
SaveExploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2018-21517

Malware in sbrugna...

5.4CVSS5.5AI score0.00634EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2018-8859

Malware in sbrugna...

6.1CVSS6.3AI score0.00799EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2001-0777

Malware in sbrugna...

7.5CVSS6.4AI score0.02818EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2013-2204

Malware in sbrugna...

5.3CVSS5.6AI score0.0136EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-23634

Malware in sbrugna...

5.3CVSS5.6AI score0.00483EPSS
SaveExploits0References2
Rows per page
Query Builder