1213173 matches found
1CRM-CVE
1CRM-CVE Уязвимость программного обеспечения 1CRM Список уязвимостей CVE-2019-14221: Хранимая межсайтовая подделка сценариев Stored Cross Site Scripting...
CVE-2026-76794
MongoSQL Transition Readiness Tool does not sufficiently encode database metadata before including it in generated HTML. A MongoDB user with write access can introduce crafted metadata that may cause script code to run when another user generates and opens the report, potentially exposing report...
osticket-stored-xss-security-assessment
CVE-2026-36214 - XSS Memorizzato in osTicket tramite Bootstrap Tooltip Report di Cybersecurity in Stile Consulenziale Documento professionale di valutazione delle vulnerabilità per XSS memorizzato in osTicket, che include impatto aziendale, remediation e strategia di mitigazione. 📍 Riepilogo del...
CVE-2026-76794 MongoDB BI Connector Transition Readiness Report Improper HTML Encoding When Processing Database Metadata
MongoSQL Transition Readiness Tool does not sufficiently encode database metadata before including it in generated HTML. A MongoDB user with write access can introduce crafted metadata that may cause script code to run when another user generates and opens the report, potentially exposing report...
CVE-2024-50803-Redaxo
CVE-2024-50803 Stored XSS in der Mediapool-Funktion von Redaxo In Redaxo-Versionen 5.18.0 wurde eine gespeicherte Cross-Site-Scripting XSS-Schwachstelle gefunden, die es Angreifern mit ausreichenden Berechtigungen ermöglicht, eine schädliche SVG-Datei über die Mediapool-Funktion hochzuladen...
CVE-2026-55247 plone.app.event: Denial of service via iCalendar import
plone.app.event provides the event content type for Plone. Prior to versions 5.2.4 and 6.0.1, the iCalendar import in src/plone/app/event/ical/importer.py accepts insufficiently restricted calendar and event URLs, does not adequately bound downloaded bytes or imported events, and commits work per...
cve-2019-10070-apache-atlas-xss
Questo repository non contiene un README...
XSS2Shell-CVE-2026-64638
Questo repository non contiene un README...
CVE-2024-24135
CVE-2024-24135: Produktbestand mit Export nach Excel - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24135.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24135/blob/main/CVE-2024-24135.md...
CVE-2026-21013-PDF-JavaScript-Injection-via-Embedded-Script
CVE-2026-21013 – एम्बेडेड स्क्रिप्ट के माध्यम से PDF JavaScript इंजेक्शन प्रोग्राम कोड Python जो दुर्भावनापूर्ण PDF जनरेट करता है root@kitploit: generatepdfjsinject.py - Creates a PDF with embedded JavaScript pdf = b"""%PDF-1.7 1 0 obj endobj trailer %%EOF """ with open"malicious.pdf", "wb" as f:...
EUVD-2026-67845
Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs processes attacker-controlled data from the /ext URL route in yamcs-web/src/main/webapp/projects/webapp/src/app/core/routes/extension.matcher.ts, extension.component.ts, and app.component.ts without checking registered plugin...
CVE-2025-25296
CVE-2025-25296 Prova di concetto POC Descrizione Questo progetto dimostra una prova di concetto POC per la vulnerabilità CVE-2025-25296 che colpisce Label Studio, uno strumento open-source per l'etichettatura dei dati. La vulnerabilità risiede nell'endpoint /projects/upload-example, che non riesc...
CVE-2024-55976
CVE-2024-55976 Critical Site Intel = 1.0 - Iniezione SQL non autenticata Descrizione Il plugin Critical Site Intel per WordPress è vulnerabile a SQL Injection nelle versioni fino alla 1.0 inclusa, a causa di un escaping insufficiente sul parametro fornito dall'utente e della mancanza di una...
CVE-2026-51565
CVE-2026-51565 Avviso di sicurezza per CVE-2026-51565 Descrizione La vulnerabilità di cross-site scripting XSS in Modules/Docs/DocsController.php in Milk admin =0.9.8 consente ad attaccanti remoti di iniettare script web o HTML arbitrari tramite il parametro action in una richiesta appositamente...
CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload
CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload POC di DNN Insufficient Access Control - Image Upload permette la sovrascrittura dei contenuti del sito Sono un uomo semplice, vedo cvss:10/10 e ci vado xD Ho visto questa nuova CVE CVE-2025-64095 DNN Insufficient Access Control - Image...
CVE-2026-6176
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the aggregated review form submission in versions up to and including 5.106.0. This is due to insufficient input sanitization and output escaping on user-supplied review comment text. The...
CVE-2026-5953
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026...
CVE-2026-2472-Vertex-AI-SDK-Google-Cloud
Cross-Site Scripting XSS Armazenado Não Autenticado em genai/evalsvisualization.py do Google Cloud Vertex AI SDK google-cloud-aiplatform nas versões de 1.98.0 até mas não incluindo 1.131.0 - github.com/googleapis/python-aiplatform Autor: Joshua Provoste Pesquisador e Desenvolvedor de N-day...
CVE-2026-47761
👋 नमस्ते ! सुरक्षा अनुसंधान 🛡️ CVE-2026-47761 – सुरक्षा शोधकर्ता प्रकार : Stored Cross-Site Scripting XSS उत्पाद : TinyMCE संदर्भ : CVE : https://nvd.nist.gov/vuln/detail/CVE-2026-47761 GHSA : https://github.com/tinymce/tinymce/security/advisories/GHSA-vg35-5wq7-3x7w सम्मान सूची CVE-2026-47761...