1047 matches found
-CVE-2023-46450
-CVE-2023-46450 ęčæ° Sourcecodester å č“¹å¼ęŗåŗåē®”ēē³»ē» 1.0 ēę·»å ä¾åŗååč½ ååØč·Øē«čę¬ļ¼XSSļ¼ę¼ę“ć éå äæ”ęÆ å č“¹å¼ęŗåŗåē®”ēē³»ē»ēę·»å ä¾åŗååč½äøååØäøäøŖč§é¢ POC ååØå XSS ę¼ę“ć é¾ę„ļ¼ https://youtu.be/LQy0xIK2q0 ę¼ę“ē±»å č·Øē«čę¬ļ¼XSSļ¼ äŗ§åä¾åŗå å¼ęŗ åå½±åäŗ§å代ē åŗ free-and-open-source-inventory-management-system-php-source-code - 1.0000 åå½±åē»ä»¶ ę·»å ä¾åŗååč½ ę»å»ē±»å čæēØ å½±å代ē ę§č” ęÆ ę»å»åé...
Linux Distros Unpatched Vulnerability : CVE-2026-55214
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store active markup in supplier website field...
CVE-2026-55214
GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store active markup in supplier website fields. Any user who opens the affected item's suppliers list triggers the stored cross-site scripting payload. This issue is fixed in version...
UBUNTU-CVE-2026-55214
GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store active markup in supplier website fields. Any user who opens the affected item's suppliers list triggers the stored cross-site scripting payload. This issue is fixed in version...
CVE-2026-55214
GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store active markup in supplier website fields. Any user who opens the affected item's suppliers list triggers the stored cross-site scripting payload. This issue is fixed in version...
CVE-2026-55214 GLPI: Stored XSS in suppliers
GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store active markup in supplier website fields. Any user who opens the affected item's suppliers list triggers the stored cross-site scripting payload. This issue is fixed in version...
CVE-2026-55214
The asset and IT management software GLPI versions 11.0.6 through 11.0.8 are vulnerable to a stored cross-site scripting (XSS) flaw. An authenticated technician can exploit this by storing active markup within the supplier website fields . When any user subsequently views the affected item's supp...
CVE-2026-55214 GLPI: Stored XSS in suppliers
GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store active markup in supplier website fields. Any user who opens the affected item's suppliers list triggers the stored cross-site scripting payload. This issue is fixed in version...
CVE-2026-55214 GLPI: Stored XSS in suppliers
GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store active markup in supplier website fields. Any user who opens the affected item's suppliers list triggers the stored cross-site scripting payload. This issue is fixed in version...
EUVD-2026-87283
GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store active markup in supplier website fields. Any user who opens the affected item's suppliers list triggers the stored cross-site scripting payload. This issue is fixed in version...
CVE-2026-55214: Improper Encoding or Escaping of Output
GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store active markup in supplier website fields. Any user who opens the affected item's suppliers list triggers the stored cross-site scripting payload. This issue is fixed in version...
PT-2026-99075
Name of the Vulnerable Software and Affected Versions GLPI versions 11.0.6 through 11.0.7 Description An authenticated technician can store active markup in supplier website fields. This leads to stored cross-site scripting XSS, where any user viewing the affected item's suppliers list triggers t...
Astra Linux ā Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Backlight: led-bl: Added devlink to the supplier LEDs The LED Backlight is a consumer of one or multiple LED class devices. However, devlink currently cannot create the correct supplier-producer links when the supplier is a LED...
CVE-2026-86232: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supdel.php?type=supplier. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. Th...
CVE-2026-80711
A flaw was found in the Linux kernel's power supply subsystem, specifically within the MAX17040 fuel gauge driver. When the MAX17040 fuel gauge operates without a registered charger status supplier, the driver fails to properly handle this missing information. This oversight can result in userspa...
Linux Distros Unpatched Vulnerability : CVE-2026-80711
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplie...
SUSE CVE-2026-80711
In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplier power supply. If no supplier is registered,...
CVE-2026-80711
In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplier power supply. If no supplier is registered,...
CVE-2026-80711 power: supply: max17040: handle missing status supplier
In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplier power supply. If no supplier is registered,...
CVE-2026-80711 power: supply: max17040: handle missing status supplier
In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplier power supply. If no supplier is registered,...