CVE-2026-52370

Summary: CVE-2026-52370 is a reflected XSS in the Forum posting function of O2OA v10. The vulnerability allows an attacker to cause the execution of arbitrary JavaScript in a victim’s browser by visiting a crafted URL. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) indicates network ac...

EUVD-2020-23409

Malware in sbrugna...

EUVD-2018-2599

Malware in sbrugna...

Plenti - Code Injection - Denial of Services

Summary While pushing a file via postLocal method if user add javascript code in file parameter that codes can exe in v8go context. Details While posting a file via postLocal, any attacker will add javascript codes to file parameter. That parameter content pass to componentSignature method after...

CVE-2025-23419

creationtimestamp| type| source ---|---|--- 2025-02-05 17:55:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lhh5dqksd622 2025-02-05 18:16:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6ktldeu2i 2025-02-05 18:22:28+00:00| seen|...

CVE-2020-36763

Cross Site Scripting XSS vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary code via the content, time, copyfrom parameters when adding or editing a post...

CVE-2002-2398

The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter...