358 matches found
CVE-2026-108561
A stored cross-site scripting vulnerability in the report date-selection controls of Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in a victim's browser by persuading them to follow a crafted report URL and complete normal reauthentication. An...
CVE-2026-108561
A stored cross-site scripting vulnerability in the report date-selection controls of Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in a victim's browser by persuading them to follow a crafted report URL and complete normal reauthentication. An...
CVE-2026-108561
Revive Adserver versions 6.0.8 and earlier are vulnerable to a stored cross-site scripting (XSS) vulnerability in the report date-selection controls. An unauthenticated attacker can save an attacker-controlled period_preset value into a victim's session. Because this value is inserted into JavaSc...
CVE-2026-108561
A stored cross-site scripting vulnerability in the report date-selection controls of Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in a victim's browser by persuading them to follow a crafted report URL and complete normal reauthentication. An...
EUVD-2026-123620
A stored cross-site scripting vulnerability in the report date-selection controls of Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in a victim's browser by persuading them to follow a crafted report URL and complete normal reauthentication. An...
PT-2026-145295
A stored cross-site scripting vulnerability in the report date-selection controls of Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in a victim's browser by persuading them to follow a crafted report URL and complete normal reauthentication. An...
CVE-2026-108561: Revive Adserver: A stored cross-site scripting vulnerability in the report date-selection controls of Revive Adserver 6.0.8 and earlier…
A stored cross-site scripting vulnerability in the report date-selection controls of Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in a victim's browser by persuading them to follow a crafted report URL and complete normal reauthentication. An...
Revive Adserver: Stored XSS in report date selection
A stored cross-site scripting vulnerability was discovered in the date-selection controls of standard reports. A crafted period preset value could be saved in a user's session and inserted into JavaScript without proper encoding, allowing malicious code to execute during report views. The...
CVE-2026-15625
creationtimestamp| type| source ---|---|--- 2026-07-14 06:12:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlkfme2yr2x 2026-07-19 20:36:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmzxf6552i...
CVE-2026-59832
creationtimestamp| type| source ---|---|--- 2026-07-10 00:17:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqauoqehek25 2026-07-10 03:01:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqb5uebh3r25...
CVE-2026-14701
creationtimestamp| type| source ---|---|--- 2026-07-05 09:54:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvcmvrl7n2l...
CVE-2026-28701
creationtimestamp| type| source ---|---|--- 2026-06-25 17:15:07+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-04 2026-06-26 23:55:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpa5fuicyu2l 2026-06-27 00:00:43+00:00| seen|...
CVE-2011-5148
creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:37+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eed2420a-1246-47cb-9069-e60d865b0c71 2026-06-23 14:04:09+00:00| exploited|...
CVE-2026-53704
creationtimestamp| type| source ---|---|--- 2026-06-15 20:33:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe4yrlwsf2y...
CVE-2026-44655
creationtimestamp| type| source ---|---|--- 2026-05-29 03:29:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmxltmhdmb2w...
CVE-2026-45952
creationtimestamp| type| source ---|---|--- 2026-05-27 15:13:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116647184733986841...
CVE-2026-24209
creationtimestamp| type| source ---|---|--- 2026-05-20 07:11:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbe272t6k2r...
CVE-2021-47967
CVE-2021-47967 affects PHP Timeclock 1.04 with multiple cross-site scripting (XSS) vulnerabilities that allow unauthenticated attackers to inject arbitrary JavaScript by manipulating URL paths and POST parameters. Attackers can target login.php, timeclock.php, audit.php, and timerpt.php endpoints...
CVE-2026-43109
creationtimestamp| type| source ---|---|--- 2026-05-06 11:34:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116527415042811896 2026-05-22 13:05:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmgyri3mmq2x 2026-07-09 01:17:37+00:00| seen|...