CVE-2026-52370

A reflected cross-site scripting (XSS) vulnerability exists in the Forum posting function of O2OA v10 . This flaw allows an attacker to execute arbitrary JavaScript within a victim's browser by providing a crafted URL . No specific remediation, exploit details, or internal component files are pro...

EUVD-2018-2599

Malware in sbrugna...

EUVD-2020-23409

Malware in sbrugna...

Plenti - Code Injection - Denial of Services

Summary While pushing a file via postLocal method if user add javascript code in file parameter that codes can exe in v8go context. Details While posting a file via postLocal, any attacker will add javascript codes to file parameter. That parameter content pass to componentSignature method after...

CVE-2025-23419

creationtimestamp| type| source ---|---|--- 2025-02-05 17:55:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lhh5dqksd622 2025-02-05 18:16:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6ktldeu2i 2025-02-05 18:22:28+00:00| seen|...

CVE-2020-36763

Cross Site Scripting XSS vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary code via the content, time, copyfrom parameters when adding or editing a post...

CVE-2002-2398

The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter...