DetectWindowsCopyOnWriteForAPI

Windows Process Property Enumeration Tools for Threat Hunting Background The purpose of these tools is to enumerate traits of Windows processes that support the detection of process injection tradecraft used by threat actors. Tools d-cow - Windows Copy on Write Detector for shared Windows APIs e....

CVE-2019-11287

CVE-2019-11287: DoS via Heap Overflow in RabbitMQ Web Management Plugin Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is...

CVE-2021-42662

CVE-2021-42662 CVE-2021-42662 - Stored Cross-Site Scripting vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: A stored XSS vulnerability exists in the Event management software version 2.3.0. An attacker can leverage this vulnerability in order...

CVE-2026-121603 Solanum before commit 2ea1382 Buffer Overflow via Server-to-Server KILL Handler

Solanum before commit 2ea1382 contains a buffer overflow vulnerability in mskill that allows malicious linked servers to corrupt memory by sending an overlong kill reason. Attackers controlling a rogue or compromised peer server can send a reason exceeding KILLLEN that overflows a static 512-byte...

CLEANSTART-2026-CU45491 Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason

Security vulnerability affects the rundeck package. A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason...

wp-cerber-9.10-stored-xss

WP Cerber 9.10 — Unauthenticated Stored XSS in Lockout Reason...

Astra Linux – vulnerability in rabbitmq-server

Pivotal RabbitMQ versions prior to 3.7.21 in 3.7.x and prior to 3.8.1 in 3.8.x, as well as RabbitMQ for Pivotal Platform versions prior to 1.16.7 in 1.16.x and prior to 1.17.4 in 1.17.x, contain a web management plugin vulnerable to a denial-of-service attack. The “X-Reason” HTTP header can be...

CVE-2016-20098

Moderator Toolbox reddit-moderator-toolbox before 4.0.14 contains a stored cross-site scripting vulnerability in the removalreasons module, which inserts subreddit toolbox wiki fields into popup HTML without encoding. Attackers who can edit the toolbox wiki page can plant JavaScript in fields lik...

CVE-2016-20098 Moderator Toolbox before 4.0.14 Stored XSS via Removal Reasons Configuration

Moderator Toolbox reddit-moderator-toolbox before 4.0.14 contains a stored cross-site scripting vulnerability in the removalreasons module, which inserts subreddit toolbox wiki fields into popup HTML without encoding. Attackers who can edit the toolbox wiki page can plant JavaScript in fields lik...

CVE-2016-20098

The Moderator Toolbox (reddit-moderator-toolbox) before version 4.0.14 is vulnerable to a stored cross-site scripting (XSS) flaw in the removalreasons module. The root cause is the failure to encode subreddit toolbox wiki fields before inserting them into popup HTML. An attacker with permissions ...

EUVD-2016-10914

Moderator Toolbox reddit-moderator-toolbox before 4.0.14 contains a stored cross-site scripting vulnerability in the removalreasons module, which inserts subreddit toolbox wiki fields into popup HTML without encoding. Attackers who can edit the toolbox wiki page can plant JavaScript in fields lik...

CVE-2016-20098

Moderator Toolbox reddit-moderator-toolbox before 4.0.14 contains a stored cross-site scripting vulnerability in the removalreasons module, which inserts subreddit toolbox wiki fields into popup HTML without encoding. Attackers who can edit the toolbox wiki page can plant JavaScript in fields lik...

PT-2026-108988

Moderator Toolbox reddit-moderator-toolbox before 4.0.14 contains a stored cross-site scripting vulnerability in the removalreasons module, which inserts subreddit toolbox wiki fields into popup HTML without encoding. Attackers who can edit the toolbox wiki page can plant JavaScript in fields lik...

Toolbox-Team Reddit-Moderator-Toolbox Cross-Site Script Vulnerability

The versions of toolbox-team reddit-moderator-toolbox before 4.0.14 have a cross-site scripting vulnerability. This vulnerability stems from the removalreasons module inserting unencoded subreddit toolbox wiki fields into pop-up HTML pages. It constitutes a storage-type cross-site scripting...

CLEANSTART-2026-AY49632 Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason

Security vulnerability affects the apache-nifi-registry package. A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason...

CLEANSTART-2026-IY13000 Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason

Security vulnerability affects the rundeck package. A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason...

CLEANSTART-2026-TS74004 Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason

Security vulnerability affects the apache-hive package. A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason...

CVE-2026-97650

A vulnerability has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function echo of the file admin/fun/addLog.php. The manipulation of the argument reason/detail leads to cross site scripting. The attack can be...

CVE-2026-97647

A security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. This impacts an unknown function of the file user/editLog.php. Such manipulation of the argument sid/addtime/type/reason/detail/logdate leads to authorization bypass...

CVE-2026-97650 ningzichun student-management-system addLog.php echo cross site scripting

A vulnerability has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function echo of the file admin/fun/addLog.php. The manipulation of the argument reason/detail leads to cross site scripting. The attack can be...