825 matches found
Orchard Core cross-site scripting vulnerabilities
Orchard Core is an open-source modularized and multi-tenant application framework built using Asp.Net Core by the US-based Orchard Core company. It also includes a content management system Cms built on top of this framework. The Orchard Core RC1 version contained a cross-site scripting...
CGA-J2H4-853H-52PC
Bulletin has no description...
CGA-3PHR-PC3X-MVPV
Bulletin has no description...
CVE-2026-1551
A weakness has been identified in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/course/controller.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been made available to...
CGA-253R-6V2P-HWF2
Bulletin has no description...
GHSA-4WP9-CF5H-V2G5
creationtimestamp| type| source ---|---|--- 2026-01-25 17:13:30+00:00| seen| https://bsky.app/profile/0xacb.com/post/3mdba37uwhz2s...
GHSA-6PW3-H7XF-X4GP
creationtimestamp| type| source ---|---|--- 2026-01-24 21:25:05+00:00| seen| https://gist.github.com/alon710/f05df8863d4316e4f7a003f62735ffa6 2026-01-24 22:34:42+00:00| seen| https://gist.github.com/alon710/ca1278aa87a44b0cf4af1ac5fda3f0eb 2026-01-24 22:34:45+00:00| seen|...
GHSA-G9MF-H72J-4RW9
creationtimestamp| type| source ---|---|--- 2026-01-24 21:24:57+00:00| seen| https://gist.github.com/alon710/4af47935bc7f751e051380651f29102d 2026-07-02 16:42:10+00:00| seen| https://gist.github.com/konard/7292d01fd27ee78b9adfcdd581745d9e...
WordPress Plugin Administrative Shortcodes Security Vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...
CVE-2026-0534
A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the...
CVE-2026-0534
A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the...
CVE-2026-0534
A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the...
CVE-2026-0534 Stored XSS in the value of a part attribute
A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the...
CVE-2026-0534
A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the...
CVE-2026-0534 Stored XSS in the value of a part attribute
A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the...
CVE-2026-0534
This CVE (CVE-2026-0534) affects Autodesk Fusion desktop application. The issue is a Stored Cross-site Scripting (XSS) vulnerability triggered by a malicious HTML payload stored in a part’s attribute and activated by user interaction, allowing an attacker to read local files or execute arbitrary ...
PT-2026-4202
A maliciously crafted HTML payload, stored in a part’s attribute and clicked by a user, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the...
MINI-PJ63-QMXR-C8H9
Bulletin has no description...
CVE-2025-40809
A vulnerability has been identified in Solid Edge SE2024 All versions V224.0 Update 14, Solid Edge SE2025 All versions V225.0 Update 6. The affected applications contains an out of bounds write vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the...