CVE-2025-52035

A vulnerability in NotesCMS and specifically in the page /index.php?route=notes. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as of commit 7d821a0f028b0778b245b99ab3d3bff1ac10e2d3 dated...

CVE-2025-52037

NotesCMS vulnerability CVE-2025-52037 is a stored XSS on the /index.php?route=sites page caused by manipulation of service description titles. Affected code path exists in source as of commit 7d821a0f028b0778b245b99ab3d3bff1ac10e2d3 (2024-05-08) and was fixed in commit 95322c5121db7070f3bd54f2848...

CVE-2020-7242

CVE-2020-7242 affects Comtech Stampede FX-1010, version 7.4.3. The issue allows remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and injecting shell metacharacters into the Target IP address field; in some cases authentication ...

winkelparkdecentrale.nl XSS vulnerability

Open Bug Bounty ID: OBB-210698 Description| Value ---|--- Affected Website:| winkelparkdecentrale.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...