CVE-2019-10092

CVE-2019-10092: Cross-Site Scripting limitado a través de la página "Proxy Error" en Apache HTTP Server En Apache HTTP Server 2.4.0-2.4.39, se informó de un problema limitado de cross-site scripting que afectaba a la página de error de modproxy. Un atacante podía provocar que el enlace de la pági...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management

Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the Data Insight DI component with a Service Pack update. Please understand that the new use of security bulletins represents a change in our communication process, not an increase in security...

Joplin-CVE-2022-35131

Joplin CVE-2022-35131 XSS que conduce a RCE en Joplin que afecta a la versión 2.8.8 y anteriores. Probado y funciona en Windows y Linux. Reportado y corregido: 2022-06 Resumen técnico 1. Crea una nota con el payload de JavaScript como título POCs abajo 2. Presiona Ctrl+P y busca algo en la nota o...

blindxss-lite

blindxss-lite A lightweight Blind XSS Cross-Site Scripting collector and payload server built with Flask. It serves a JavaScript payload that captures victim browser data cookies, localStorage, DOM snippets, etc. and forwards it to a SQLite-backed dashboard protected by HTTP Basic Auth. Features...

CVE-2019-15053

CVE-2019-15053 FAB-2019-00156 Vulnerabilidad descubierta por mí CVE-2019-15053 Aviso: advisory.txt Información Básica Advisory ID..........: FAB-2019-00156 Product..............: HTML Include and replace macro Manufacturer.........: The Plugin People Affected Versions..: 1.4.2 and before Tested...

CVE-2022-43117

Descripción sugerida La aplicación de almacenamiento de contraseñas de Sourcecodester en PHP/OOP y MySQL 1.0 se descubrió que contenía múltiples vulnerabilidades de cross-site scripting XSS a través de los parámetros Name, Username, Description y Site Feature. Información adicional Prueba de...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.16 packages and security update

Red Hat OpenShift Container Platform release 4.22.16 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.22.16 security update

Red Hat build of MicroShift release 4.22.16 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

CVE-2025-51397

Título del Exploit: LiveHelperChat img src="https://raw.githubusercontent.com/thewhiteevil/cve...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.35 packages and security update

Red Hat OpenShift Container Platform release 4.21.35 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

ipa security, bug fix, and enhancement update

An update is available for ipa. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rocky Enterprise Software Foundation Identity Management IdM is a centralized...

CVE-2024-4367-PDF.js-xss

CVE-2024-4367–PDF.js-xss CVE-2024-4367–PDF.js-xss Descargar el entorno, descomprimir y acceder unzip cve-2024-4367-lab cd cve-2024-4367-lab Comando para iniciar el entorno mkdir upload chmod 777 upload docker-compose up -d...

CVE-2026-76719 HPE OneView - Cross-site scripting vulnerability

A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...

CVE-2026-76719 HPE OneView - Cross-site scripting vulnerability

A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...

CVE-2026-76719

A security vulnerability exists in HPE OneView and HPE Synergy Composer (prior to v11.40 ) that may be exploited remotely. The vulnerability allows for Cross-Site Scripting (XSS) and URL Redirection , which can lead to session hijacking , data theft , or other unauthorized actions. The CVSS v3.1 ...

CVE-2026-76718 HPE OneView - Cross-site scripting vulnerability

A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions...

CVE-2026-76718 HPE OneView - Cross-site scripting vulnerability

A potential security vulnerability in HPE OneView can be exploited to allow remote session hijacking or other unauthorized actions...

CVE-2026-76718

A security vulnerability exists in HPE OneView (prior to v11.40 ) and HPE Synergy Composer (prior to v11.40 ), categorized as a Cross-Site Scripting (XSS) and URL Redirection issue. The flaw can be exploited remotely to facilitate remote session hijacking or other unauthorized actions. To remedia...