PT-2026-59352

Summary The profile image url field on the user profile update form accepted arbitrary data: URI values without MIME-type validation. Two distinct attack paths were independently demonstrated by separate reporters: 1. data:text/html;base64,... in a new browser tab raresvis, 2025-04-17 — when a...

EUVD-2005-0070

Malware in sbrugna...

EUVD-2024-3149

Malicious code in bioql PyPI...

vBulletin Cross-Site Request Forgery Vulnerability

vBulletin is a forum program. A cross-site request forgery vulnerability exists in vBulletin, which allows remote attackers to perform cross-site scripting attacks via admin authentication requests hijacked by the adminhash and securitytoken parameters...

ElfChat 5.2.0 Pro Cross Site Scripting

ElfChat 5.2.0 Pro Reinstall SCript EXploits =========================================== Author : indoushka Vondor : http://elfchat.ru/ Dork: 2011 Elfet - ElfChat 5.2.0 Pro ========================== XSS Reflected - Jquery 1.4.2 $function $'users'.eachfunction var select = $this; var option =...

aimXSS.txt

Title: AIM Multiple Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk Discovered: 26 December 2005 Published: 7 January 2006 MorX Security Research Team http://www.morx.org Service: Web Vendor: AIM.com Vulnerability: Cross Site Scripting / Cookie-Theft / Relogin attacks Severity:...