CVE-2026-63157 Omnispace Agora Project < 26.10.0 Stored XSS via Links Module

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts by submitting an unsanitized link address adress field that is echoed into an onclick event-handler attribute without neutralizing quotes...

[Full-disclosure] New &#40;19.10.05&#41; MS-IE Url Spoofing bug &#40;by K-Gen&#41;.

New 19.10.05 MS-IE Url Spoofing bug by K-Gen. Gr337s .. I K-Gen have found a new I think.. URL spoofing bug in IE. Affected : All MS-IE Browsers Win XP SP2 as well. This allows a malicious website to host a specially crafted A HREF tag that shows to the user as a link to one location, but actuall...