CVE-2026-28405 MarkUs: Stored XSS in Submission HTML Preview Enables Instructor-Context Actions

MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.1, the courses//assignments//submissions/htmlcontent route reads the contents of a student-submitted file and renders them without sanitization. This issue has been patched in version 2.9.1...

CVE-2025-29766

Tuleap CSRF vulnerability (CVE-2025-29766): Missing CSRF protections on artifact submission and edition from the tracker view could allow an attacker to trick users into submitting or editing artifacts or follow-up comments. Affected versions: Tuleap Community Edition prior to 16.5.99.1741784483;...

thankyou.ru XSS vulnerability

Vulnerable URL: http://thankyou.ru/search/xxx?s=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 391161 VIP website status:| No Check thankyou.ru SSL connection:| Grade: B...

ctcr.es XSS vulnerability

Vulnerable URL: http://www.ctcr.es/es/comunicacion/agenda?id=810"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4025453 VIP website status:| No Coordinated Disclosure Timeline...

mp3kart.co XSS vulnerability

Vulnerable URL: http://mp3kart.co/mp3-%22%3E%3Cscript%3Ealert'OPENBUGBOUNTY'%3C/script%3E.html Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 134772 VIP website status:| Yes Coordinated Disclosure Timeline:...

verdana-npp.net XSS vulnerability

Vulnerable URL: http://www.verdana-npp.net/ngadmin/login.php?next=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8351030 VIP website status:| No Check verdana-npp.net SSL...

phpWebSite-0.10.0_exploit

oooo...oooo.oooooooo8.ooooooooooo .8888o..88.888........88..888..88 .88.888o88..888oooooo.....888 .88...8888.........888....888 o88o....88.o88oooo888....o888o Network security team nst.e-nex.com Title: phpWebSite = v0.10.0 Bug found by: nst Date: 24.02.2005 Web: phpwebsite.appstate.edu...

FlatNuke < 2.5.2 Form Submission Arbitrary Script Injection

Binary data 2483.prm...