Lucene search
+L

24 matches found

CVE
CVE
•added 2026/09/21 12:02 p.m.•23 views

CVE-2026-94372

MISP versions below 2.5.47 contain a stored cross-site scripting (XSS) vulnerability in the default theme's Galaxies index page . When the instance detects unknown galaxy clusters during synchronization, it renders sample tag names in an informational notice to site administrators. In the default...

6.3CVSS5.8AI score0.0039EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/21 12:02 p.m.•14 views

CVE-2026-94372 Stored Cross-Site Scripting via Unescaped Galaxy Cluster Tag Names in MISP Default Theme Galaxies Index

MISP contains a stored cross-site scripting XSS vulnerability in the default theme's Galaxies index page. When a MISP instance detects unknown custom or default galaxy clusters during synchronization, it renders sample tag names in an informational notice directed at site administrators. In the...

6.3CVSS5.8AI score0.0039EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/21 12:02 p.m.•41 views

CVE-2026-94372 Stored Cross-Site Scripting via Unescaped Galaxy Cluster Tag Names in MISP Default Theme Galaxies Index

MISP contains a stored cross-site scripting XSS vulnerability in the default theme's Galaxies index page. When a MISP instance detects unknown custom or default galaxy clusters during synchronization, it renders sample tag names in an informational notice directed at site administrators. In the...

6.3CVSS0.0039EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/21 12:00 a.m.•9 views

CVE-2026-94372: Improper Neutralization of Input During Web Page Generation

MISP contains a stored cross-site scripting XSS vulnerability in the default theme's Galaxies index page. When a MISP instance detects unknown custom or default galaxy clusters during synchronization, it renders sample tag names in an informational notice directed at site administrators. In the...

6.3CVSS5.8AI score0.0039EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/11/20 6:15 p.m.•10 views

EUVD-2025-198326

Malicious code in @ra-ide/tag-editor-frontend npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/20 6:15 p.m.•17 views

Malicious code in @ra-ide/tag-editor-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c33209550ea4f214f4a53a91ca86598ef1ba273d7dae04de11effd081d8cd75 The package @ra-ide/tag-editor-frontend was found to contain malicious code. Source: ossf-package-analysis...

6.9AI score
SaveExploits0
OSV
OSV
•added 2025/11/20 6:15 p.m.•14 views

MAL-2025-190597 Malicious code in @ra-ide/tag-editor-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c33209550ea4f214f4a53a91ca86598ef1ba273d7dae04de11effd081d8cd75 The package @ra-ide/tag-editor-frontend was found to contain malicious code. Source: ossf-package-analysis...

6.8AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2009-3783

Malware in sbrugna...

9.3CVSS6.4AI score0.05757EPSS
SaveExploits3References6
Patchstack
Patchstack
•added 2024/09/30 12:00 a.m.•34 views

WordPress BuddyForms Plugin <= 2.8.12 is vulnerable to Cross Site Scripting (XSS)

Software BuddyForms Type Plugin Vulnerable versions = 2.8.12 Fixed in 2.8.13 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47377 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 9418faef5fbf Credits SOPROBRO Required privilege Editor...

5.9CVSS6.5AI score0.00274EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2017/08/29 8:29 p.m.•17 views

PYSEC-2017-108

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality...

6.1CVSS6.4AI score0.02215EPSS
SaveExploits0References2Affected Software1
hackapp
hackapp
•added 2016/04/01 9:14 a.m.•9 views

Star Music Tag Editor - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Star Music Tag Editor published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
zdt
zdt
•added 2010/04/14 12:00 a.m.•43 views

Mp3 Online Id Tag Editor RFI Vulnerability

Exploit for php platform in category web applications ========================================== Mp3 Online Id Tag Editor RFI Vulnerability ========================================== ======================================================================================== | Title : Mp3 Online Id T...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2010/04/14 12:00 a.m.•22 views

Mp3 Online Id Tag Editor - Remote File Inclusion

Mp3 Online Id Tag Editor - Remote File Inclusion ======================================================================================== | Title : Mp3 Online Id Tag Editor RFI Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | | Web Site :...

7.5AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2010/04/01 12:00 a.m.•40 views

MP3 Online Id Tag Editor Remote File Inclusion

======================================================================================== | Title : Mp3 Online Id Tag Editor RFI Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | | Web Site :...

7.4AI score
SaveExploits0
NVD
NVD
•added 2009/10/27 4:30 p.m.•31 views

CVE-2009-3811

Stack-based buffer overflow in Music Tag Editor 1.61 build 212 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag. NOTE: some of these details are obtained from third party information...

9.3CVSS8.1AI score0.05757EPSS
SaveExploits3References5
Prion
Prion
•added 2009/10/27 4:30 p.m.•22 views

Stack overflow

Stack-based buffer overflow in Music Tag Editor 1.61 build 212 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag. NOTE: some of these details are obtained from third party information...

9.3CVSS8.7AI score0.05757EPSS
SaveExploits3References5Affected Software1
Cvelist
Cvelist
•added 2009/10/27 4:00 p.m.•47 views

CVE-2009-3811

Stack-based buffer overflow in Music Tag Editor 1.61 build 212 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag. NOTE: some of these details are obtained from third party information...

8.1AI score0.05757EPSS
SaveExploits3References5
CVE
CVE
•added 2009/10/27 4:00 p.m.•76 views

CVE-2009-3811

CVE-2009-3811 affects Music Tag Editor 1.61 build 212. It is a stack-based buffer overflow in the MP3 tag handling (ID3 tag) that can be triggered by a crafted MP3 file, enabling remote code execution. The vulnerability arises during processing of long ID3 tags, with the public description explic...

9.3CVSS8.1AI score0.05757EPSS
SaveExploits3References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/10/27 12:00 a.m.•7 views

CVE-2009-3811: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Music Tag Editor 1.61 build 212 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag. NOTE: some of these details are obtained from third party information...

9.3CVSS6.8AI score0.05757EPSS
SaveExploits3References2
Exploit DB
Exploit DB
•added 2009/07/16 12:00 a.m.•40 views

Music Tag Editor 1.61 build 212 - Remote Buffer Overflow (PoC)

== Music Tag Editor 1.61 build 212 Remote Buffer Overflow PoC Product: http://www.assistanttools.com/products/tageditors/musictageditor/index.shtml Tested On Microsoft Windows XP Professional SP3 English Vulnerability Discovered By Gjoko 'LiquidWorm' Krstic liquidworm gmail com Zero Science Lab -...

9.3CVSS5.8AI score0.05757EPSS
SaveExploits3
Rows per page
Query Builder