Lucene search
+L

116164 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/14 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2025-56535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross-site scripting XSS vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into...

6.1CVSS5.9AI score0.00185EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•18 views

PT-2026-91033

A vulnerability has been found in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. Impacted is an unknown function of the file hexstrike server.py of the component Execute Endpoint. The manipulation of the argument code/script leads to os command injection. It is possible to...

7.5CVSS6.8AI score0.0206EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/09/14 12:00 a.m.•22 views

Linux Distros Unpatched Vulnerability : CVE-2025-56536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stored cross-site scripting XSS vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payloa...

6.1CVSS5.7AI score0.00185EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•16 views

PT-2026-91092

Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

6.1CVSS5.8AI score0.00263EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•7 views

CVE-2026-81900: Improper Neutralization of Input During Web Page Generation

Concrete CMS before 9.5.3 applied only trim to the YouTube block's stored width and height values and printed them into iframe HTML attributes without escaping or integer casting, resulting in stored cross-site scripting. A user with editblock permission could inject an event handler that execute...

7.3CVSS5.6AI score0.00256EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•3 views

CVE-2026-90619: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been found in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. Impacted is an unknown function of the file hexstrikeserver.py of the component Execute Endpoint. The manipulation of the argument code/script leads to os command injection. It is possible to...

7.5CVSS6.8AI score0.0206EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•2 views

CVE-2026-82776: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

6.1CVSS6.4AI score0.00263EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•0 views

CVE-2026-82788: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability exists in CPSL-08P1EN. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

6.1CVSS6.4AI score0.00263EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•14 views

PT-2026-91077

Cross-site scripting vulnerability exists in CONPROSYS M2M Gateway Series and CONPROSYS M2M Controller Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

6.1CVSS5.8AI score0.00263EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•2 views

CVE-2026-82767: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability exists in SGA1000. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

5.2CVSS7.8AI score0.00237EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•1 views

CVE-2026-82790: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

5.4CVSS6AI score0.00235EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•5 views

CVE-2026-82792: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

5.2CVSS6AI score0.00237EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•17 views

PT-2026-91073

Cross-site scripting vulnerability exists in Contec RP-WAH-SR Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

5.4CVSS5.8AI score0.00235EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/14 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2025-56537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stored cross-site scripting XSS vulnerability in opennebula v6.10.0.1 and fixed in v.7.0 allows attackers to execute arbitrary web scripts or HTML via injecti...

6.1CVSS6.2AI score0.00185EPSS
SaveExploits3References2
Redos
Redos
•added 2026/09/14 12:00 a.m.•8 views

ROS-20260914-73-0112

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

8.8CVSS7.9AI score0.00314EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/14 12:00 a.m.•20 views

Malicious code in webpackbootstrap5 (npm)

[email protected] typosquats bootstrap and ships a disguised in-browser proxy kit. Its bundled loader index-z2b7r4.js XOR-decodes a list of endpoints with a fixed key and injects remote scripts from https://dyingefforlessefforlessours.com via document.head.appendChild, then boots a...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•18 views

PT-2026-91085

Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

5.4CVSS5.8AI score0.00237EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/14 12:00 a.m.•19 views

Malicious code in @zaka13/thing (npm)

@zaka13/[email protected] ships the same disguised in-browser proxy kit as webpackbootstrap5 and webpackbootstrapscripts by the same publisher zaka13. Its YXBp.js loader matches those packages' index-z2b7r4.js same sha256: it XOR-decodes endpoints with a fixed key, injects remote scripts from...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•17 views

PT-2026-91096

Cross-site scripting vulnerability exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

5.2CVSS5.8AI score0.00237EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•10 views

PT-2026-91094

Cross-site scripting vulnerability exists in PC-HELPER Wireless I/O DIO-0404RY-LWF and PC-HELPER Wireless I/O DIO-0404RY-LWF-US. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

5.4CVSS5.8AI score0.00235EPSS
SaveExploits0References3
Rows per page
Query Builder