7 matches found
CVE-2023-33410
CVE-2023-33410 Minical 1.0.0은 CSV 인젝션에 취약합니다. 공급업체: https://github.com/minical/minical 데모 애플리케이션: https://demo.minical.io/ PoC 1단계: Accounting 모듈로 이동하여 Create New Customer를 클릭합니다. 2단계: Name 필드에 페이로드를 입력하고 Create를 클릭합니다. Payload: =HYPERLINK"","ClickHere" 3단계: Download CSV Report를 클릭하고 페이로드가 렌더링되는 ...
PT-2026-46005
Name of the Vulnerable Software and Affected Versions Kimi AI version 1.0 Description A Cross Site Scripting issue exists in the 'Preview' feature of the web interface. The application does not properly sanitize or encode HTML or JavaScript payloads produced by the AI model. When a user accesses...
CVE-2025-62413 MQTTX vulnerable to cross-site scripting via improper message payload rendering
MQTTX is an MQTT 5.0 desktop client and MQTT testing tool. A Cross-Site Scripting XSS vulnerability was introduced in MQTTX v1.12.0 due to improper handling of MQTT message payload rendering. Malicious payloads containing HTML or JavaScript could be rendered directly in the MQTTX message viewer. ...
CVE-2025-62413
MQTTX v1.12.0 contains an XSS in the message viewer caused by improper rendering of MQTT payloads (HTML/JS). This can execute scripts in the app UI and potentially access credentials or trigger actions. The issue is fixed in v1.12.1; upgrading to 1.12.1 is the recommended remediation. The vulnera...
CVE-2025-62413 MQTTX vulnerable to cross-site scripting via improper message payload rendering
MQTTX is an MQTT 5.0 desktop client and MQTT testing tool. A Cross-Site Scripting XSS vulnerability was introduced in MQTTX v1.12.0 due to improper handling of MQTT message payload rendering. Malicious payloads containing HTML or JavaScript could be rendered directly in the MQTTX message viewer. ...
MQTTX 跨站脚本漏洞
MQTTX is an open source MQTT client toolkit from EMQ Technologies. A cross-site scripting vulnerability exists in MQTTX version 1.12.0, which stems from improper handling of MQTT message payload rendering and could lead to cross-site scripting attacks...
