CVE-2026-102329

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-102329

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...

EUVD-2026-89395

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...

CVE-2026-102329

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...

CVE-2026-102329

A Cross-site scripting (XSS) vulnerability exists in the WebUI of Google Chrome prior to version 154.0.8037.92 . This flaw allows a remote attacker to bypass the web origin policy to access a privileged page by navigating the user to a crafted HTML page . No specific exploit code or in-the-wild e...

CVE-2026-102329

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...

CVE-2026-102831

A flaw was found in JupyterLab. This vulnerability allows Cross-Site Scripting XSS when pasting notebook cells from the system clipboard, as the application fails to clear trusted metadata flags from imported cell data. A remote attacker could exploit this by enticing a user to paste malicious ce...

CVE-2026-102830 JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5.11 and 4.6.4, and in JupyterLite Core 0.8.3 and earlier, the Plural-Forms header in a selected third-party language pack can append...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple Cross-Site Scripting (XSS) vulnerabilities in DOMPurify (CVE-2026-41238, CVE-2026-41239, CVE-2026-41240)

Summary Multiple Cross-Site Scripting XSS vulnerabilities in DOMPurify CVE-2026-41238, CVE-2026-41239, CVE-2026-41240 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 3.4.12 on Windows and version 3.4.13 on Linux. Vulnerability Details...

CVE-2020-9496

CVE-2020-9496 Las solicitudes XML-RPC son vulnerables a deserialización insegura y problemas de Cross-Site Scripting en Apache OFBiz 17.12.03 Instalar requisitos $ pip install -r requirements.txt $ wget https://jitpack.io/com/github/frohoff/ysoserial/master-SNAPSHOT/ysoserial-master-SNAPSHOT.jar ...

CVE-2019-10092_Docker

CVE-2019-10092 Docker - Apache HTTP Server Using $ docker-compose up Using from Docker Hub $ docker run -p 5555:5555 motikan2010/cve-2019-10092 PoC Disclosures/CVE-2019-10092-Limited Cross-Site Scripting in modproxy Error Page-Apache httpd at master · DrunkenShells/Disclosures...

CVE-2015-9251

CVE-2015-9251 [email protected] PoC para CVE-2015-9251 jQuery menor a 3.0.0. CVE-2015-9251 - PoC Exploit Este repositorio contiene un Proof of Concept PoC para la vulnerabilidad CVE-2015-9251 en la biblioteca jQuery. La vulnerabilidad permite un ataque de Cross-Site Scripting XSS a través de...

CVE-2026-100238

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - Flow Extension allows Stored XSS. This issue affects Mediawiki - Flow Extension: from before 1.46.1, 1.45.5, 1.43.10...

Security Bulletin: Multiple vulnerabilities within WebSphere Application Server, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within WebSphere Application Server which is included as part of IBM Tivoli Monitoring ITM portal server have been addressed. Vulnerability Details CVEID:CVE-2026-16184 DESCRIPTION: IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to...

CVE-2019-10092

CVE-2019-10092: Limited Cross-Site Scripting via "Proxy Error" Page in Apache HTTP Server In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the modproxy error page. An attacker could cause the link on the error page to be malformed and instead point t...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management

Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the Data Insight DI component with a Service Pack update. Please understand that the new use of security bulletins represents a change in our communication process, not an increase in security...

Joplin-CVE-2022-35131

Joplin CVE-2022-35131 XSS leading to RCE in Joplin affecting version 2.8.8 and earlier. Tested and works on Windows and Linux. Reported and fixed: 2022-06 Technical overview 1. Create a note with javascript payload as title POC:s bellow 2. Press Ctrl+P and search for something in the note or titl...

blindxss-lite

blindxss-lite A lightweight Blind XSS Cross-Site Scripting collector and payload server built with Flask. It serves a JavaScript payload that captures victim browser data cookies, localStorage, DOM snippets, etc. and forwards it to a SQLite-backed dashboard protected by HTTP Basic Auth. Features...

CVE-2019-15053

CVE-2019-15053 FAB-2019-00156 Vulnerability discoverd by me CVE-2019-15053 Advisory: advisory.txt Basic Info Advisory ID..........: FAB-2019-00156 Product..............: HTML Include and replace macro Manufacturer.........: The Plugin People Affected Versions..: 1.4.2 and before Tested...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.16 packages and security update

Red Hat OpenShift Container Platform release 4.22.16 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...