CVE-2026-37196

CVE-2026-37196 – Stored Cross-Site Scripting XSS in nirix traq v3.9.0 Overview A Stored Cross-Site Scripting XSS vulnerability exists in nirix traq v3.9.0 , where user-supplied input in the ticket description field is improperly sanitized before being rendered in the application interface. This...

CVE-2026-102372

Versions of GestSup prior to 3.2.62 are vulnerable to a Stored Cross-Site Scripting (XSS) flaw within the IMAP LOGIN connector . The root cause is a failure to properly sanitize HTML email bodies, which allows unauthenticated attackers to inject arbitrary JavaScript into ticket descriptions and r...

Exploit for CVE-2026-37196

CVE-2026-37196 – Stored Cross-Site Scripting XSS in nirix tr...

EUVD-2012-4797

Malware in sbrugna...

CVE-2012-4872

Cross-site scripting XSS vulnerability in Tickets/Submit in Kayako Fusion before 4.40.985 allows remote attackers to inject arbitrary web script or HTML via certain vectors, possibly a crafted ticket description...

CVE-2012-4872: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Tickets/Submit in Kayako Fusion before 4.40.985 allows remote attackers to inject arbitrary web script or HTML via certain vectors, possibly a crafted ticket description...

CVE-2003-0303

SQL injection vulnerability in one||zero aka One or Zero Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter...