CVE-2026-104073 NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links

NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template contex...

CVE-2026-104073 NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links

NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template contex...

CVE-2026-104073 NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links

NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template contex...

poc-cribl-rce

Disclaimer This is for informational/educational purposes only. This was put together to demonstrate an insecurity in the tool, in order for a fix to be verified by the vendor. Info Tested on Cribl v1.5.0 - Previous versions not tested but likely vulnerable. A valid JWT token can be transfered fr...

CVE-2025-65640

CVE-2025-65640 1. Vulnerability Information CVE ID: CVE-2025-65640 Currently RESERVED Vulnerability Type: Stored Cross-Site Scripting XSS CVSSv3 score: 6.3 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N Vendor: Arket/Bluenext S.r.l. Product: Globe Document Intelligence Affected Version: 5.0.0.559 Discoverer...

CVE-2025-69848-security-advisories

Reflected XSS in NetBox ProtectedError Handling CVE-2025-69848 Overview NetBox is an open-source infrastructure resource modeling and IP address management platform. A reflected cross-site scripting XSS vulnerability exists in the ProtectedError exception handling logic. When a delete operation...

PT-2026-107138

A stored cross-site scripting XSS vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful...

PT-2026-107140

Name of the Vulnerable Software and Affected Versions CloudVision affected versions not specified Description Insufficient input validation in the Fileserver upload API endpoint allows an authenticated attacker with file upload privileges to perform stored cross-site scripting XSS. This occurs wh...

Security Advisory 0185

Security Advisory 0185 . CSAF PDF Date: October 6, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 6, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-101158 CVSSv3.1 Base Score: 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H CVSSv4.0 Base Score: 9.3...

CVE-2026-36392

CVE-2026-36392: Stored XSS in RISE CRM Item Title Field Summary A stored cross-site scripting XSS vulnerability exists in the item title field of RISE CRM RISE - Ultimate Project Manager & CRM versions = 3.9.6. An authenticated administrator can inject arbitrary JavaScript into an item's title,...

CVE-2022-35497

En TM4WEB de Trimble =22.2.0, debido a una mala configuración de seguridad con los identificadores de sesión, es posible recuperar cookies de sesión válidas mediante un cross-site scripting reflejado que afecta el endpoint del visor de documentos externo. Específicamente, las tres cookies...

CVE-2025-25747-HotelDruid-3-0-7-Reflected-XSS

CVE-2025-25747 - Reflected XSS Vulnerability in HotelDruid 3.0.7 Description Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to execute arbitrary code and obtain sensitive information via the ripristinabackup parameter in the creabackup.php endpoint Severi...

CVE-2026-36669-FengOffice

Security Advisory: CVE-2026-36669 Unauthenticated Arbitrary File Upload in Feng Office Community Edition An unauthenticated arbitrary file upload vulnerability exists in ckuploadhandler.php in Feng Office Community Edition version 3.11.13.11. This flaw allows remote, unauthenticated attackers to...

CVE-2024-57427

CVE-2024-57427 - Reflected Cross-Site Scripting XSS PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting XSS. Multiple endpoints improperly handle user input, allowing malicious scripts to execute in a victim’s browser. Attackers can craft malicious links to steal...

CVE-2023-0264

PoC for CVE-2023-0264 Keycloak vulnerability that allows session hijacking during authorization code flow See https://github.com/advisories/GHSA-9g98-5mj6-f9mv Prerequisites Docker curl jq python3 or another tool to serve static files on HTTP Steps to reproduce 1. Start Keycloak container with...

CVE-2024-39090-PoC

CVE-2024-39090: Script de Exploit PoC Este script PoC explota la CVE-2024-39090, una vulnerabilidad de CSRF a XSS almacenado en PHPGurukul Online Shopping Portal v2.0. Automatiza ataques CSRF para inyectar payloads de JavaScript persistentes, que se ejecutan cuando un usuario privilegiado accede ...

Astra Linux – Vulnerability in Zabbix

A authenticated user can create a hosts group using the configuration with XSS payload, which will be available to other users. When XSS is stored by an authenticated malicious actor, and other users attempt to search for groups during the creation of new hosts, the XSS payload will activate,...

Termix-research

Termix Security Research Vulnerability research on Termix, a web-based SSH and server management platform 13k+ stars. CVE| Issue| Severity| Fixed| Advisory ---|---|---|---|--- CVE-2026-45746| Session hijacking → RCE| 9.0 Critical| v2.3.2| GHSA-cx2r-843c-vww8 CVE-2026-45750| OS command injection|...

EUVD-2026-92101

ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper with their own token so it is accepted for another user's external login intent. An attacker who predicts a victim's in-flight intent...

CVE-2026-105208 ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens

ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper with their own token so it is accepted for another user's external login intent. An attacker who predicts a victim's in-flight intent...