CVE-2026-71189 Toptech TMS7 and TopHAT Cross-site Scripting

An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application...

CVE-2026-71189

The Toptech TMS7 and TopHAT platforms are vulnerable to a Cross-site Scripting (XSS) vulnerability. An attacker can construct a malicious request that, when triggered by another application user, executes arbitrary JavaScript code within the user's browser session. The provided documents do not s...

CVE-2023-39062

CVE-2023-39062 Spipu Html2Pdf alertdocument.domain HTTP/1.1 Host: example.afine.com Cookie: PHPSESSID=oiqo2oopiqt88teqgfb0a23vk0 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:109.0 Gecko/20100101 Firefox/113.0 Accept-Language: pl,en-US;q=0.7,en;q=0.3 Accept-Encoding: gzip, deflate...

CVE-2024-50962

Cross-Site Scripting XSS en DonWeb Ferozo Webmail CVE-2024-50962 Descripción Una vulnerabilidad de Cross-Site Scripting XSS en Ferozo Webmail v1.1 permite a atacantes ejecutar scripts arbitrarios a través de los componentes Identities y Automatic Responses. Esta vulnerabilidad puede ser utilizada...

CVE-2026-84409 Lantronix G520 Series Cellular Gateway Cross-site Scripting

The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interface subsequently returns this stored value in a JSON response, and the web interface responsible for displaying update...

CVE-2026-84409 Lantronix G520 Series Cellular Gateway Cross-site Scripting

The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interface subsequently returns this stored value in a JSON response, and the web interface responsible for displaying update...

CVE-2025-51401

Título del Exploit: LiveHelperChat 4. Guarda los...

CVE-2019-12189

CVE-2019-12189 - Vulnerabilidad XSS en Zoho ManageEngine ServiceDesk Plus 9.3 Información Descripción: Se descubrió XSS en ManageEngine ServiceDesk Plus versión Versiones afectadas: 9.3 Investigador: Dang The Tuyen Prueba de concepto La vulnerabilidad se origina por la confusión de comillas simpl...

Security Bulletin: InfoSphere Data Replication - Data Replication for Availability is affected by arbitrary code execution, cross-site scripting, and denial of service

Summary IBM has released the below fix for IBM InfoSphere Data Replication - Data Replication for Availability Db2U Qreplication container in response to multiple vulnerabilities. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2026-33916...

CVE-2026-102329

A cross-site scripting flaw was found in the WebUI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=563297615 https://code.google.com/p/chromium/issues/detail?id=102329...

CVE-2026-102329

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-102329

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...

jquery-cve-2022-31160

es-define-property Object.defineProperty, but not IE 8's broken one. Example const assert = require'assert'; const $defineProperty = require'es-define-property'; if $defineProperty assert.equal$defineProperty, Object.defineProperty; else if Object.defineProperty assert.equal$defineProperty, false...

CVE-2026-102329

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...

EUVD-2026-89395

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...

CVE-2026-102329

A Cross-site scripting (XSS) vulnerability exists in the WebUI of Google Chrome prior to version 154.0.8037.92 . This flaw allows a remote attacker to bypass the web origin policy to access a privileged page by navigating the user to a crafted HTML page . No specific exploit code or in-the-wild e...

CVE-2026-102329

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...

CVE-2026-102831

A flaw was found in JupyterLab. This vulnerability allows Cross-Site Scripting XSS when pasting notebook cells from the system clipboard, as the application fails to clear trusted metadata flags from imported cell data. A remote attacker could exploit this by enticing a user to paste malicious ce...

CVE-2026-102830 JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5.11 and 4.6.4, and in JupyterLite Core 0.8.3 and earlier, the Plural-Forms header in a selected third-party language pack can append...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple Cross-Site Scripting (XSS) vulnerabilities in DOMPurify (CVE-2026-41238, CVE-2026-41239, CVE-2026-41240)

Summary Multiple Cross-Site Scripting XSS vulnerabilities in DOMPurify CVE-2026-41238, CVE-2026-41239, CVE-2026-41240 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 3.4.12 on Windows and version 3.4.13 on Linux. Vulnerability Details...