CVE-2025-52035

A vulnerability in NotesCMS and specifically in the page /index.php?route=notes. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as of commit 7d821a0f028b0778b245b99ab3d3bff1ac10e2d3 dated...

CVE-2025-52037

A stored cross-site scripting (XSS) vulnerability exists in NotesCMS (CWE-79) affecting the /index.php?route=sites page. The root cause is the improper handling and manipulation of the title of service descriptions , which allows for remote execution of malicious scripts. The issue was confirmed ...

CVE-2020-7242

CVE-2020-7242 affects Comtech Stampede FX-1010, version 7.4.3. The issue allows remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and injecting shell metacharacters into the Target IP address field; in some cases authentication ...

winkelparkdecentrale.nl XSS vulnerability

Open Bug Bounty ID: OBB-210698 Description| Value ---|--- Affected Website:| winkelparkdecentrale.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...