XWiki - Cross-Site Scripting

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the restore template to perform a XSS, e.g. by using URL such as:...

XWiki >= 6.2-milestone-1 - Cross-Site Scripting

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the DeleteApplication page to perform a XSS, e.g. by using URL such as:...

CVE-2024-4041

CVE-2024-4041 Yoast SEO /?page=%22%20onmouseover%3D%22alertdocument.domain%22%20x%3D%22 3. في شريط الإدارة، افتح قائمة Yoast وقم بالتمرير/النقر على احصل على Yoast SEO Premium. 4. يتم تنفيذ JavaScript من معالج الأحداث المحقون onmouseover، مما يؤكد وجود XSS منعكس...

IngressNightterror

IngressNightterror CVE-2025-1974 نظرة عامة هذا المستودع هو بحثي حول ثغرة IngressNightmare. يتضمن ملفات نشر لـ Ingress قابل للثغرة، والاستغلال نفسه، والحمولة shared object. CVE قائمة فهارس CVE: CVE-2025-1974 - الثغرة الجذرية CVE-2025-24514 - حقن تعليق توضيحي auth-url CVE-2025-1097 - حقن تعليق...

CVE-2022-28117

CVE-2022-28117 Navigate CMS = 2.9.4 - सर्वर-साइड अनुरोध जालसाजी प्रमाणित विवरण Navigate CMS v2.9.4 के feedparser वर्ग में सर्वर-साइड अनुरोध जालसाजी SSRF दूरस्थ हमलावरों को feed पैरामीटर में मनमाने URL इंजेक्ट करके एप्लिकेशन को मनमाने अनुरोध करने के लिए मजबूर करने की अनुमति देता है। संदर्भ...

CVE-2021-36750

CVE-2021-36749 इसके बारे में - Druid इन्जेशन सिस्टम में, InputSource का उपयोग किसी निश्चित डेटा स्रोत से डेटा पढ़ने के लिए किया जाता है। हालांकि, HTTP InputSource प्रमाणित उपयोगकर्ताओं को Druid सर्वर प्रक्रिया के विशेषाधिकारों के साथ, इच्छित स्रोतों के अलावा अन्य स्रोतों जैसे स्थानीय फ़ाइल सिस्टम...

CVE-2022-35499

In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary parameter appended to the URL...

CVE-2025-59382-QNAP-Password-Reset-Account-Takeover

CVE-2025-59382: QNAP Password Reset to Account Takeover Unauthenticated attacker-controlled password reset URL in /cgi-bin/resetpassword.cgi. Tested against QuTScloud c5.2.4.3041 build 20250211 in a lab. QNAP later published this as CVE-2025-59382 in advisory QSA-26-10. Short version An...

CVE-2026-85230

A persistent unsafe URL injection vulnerability exists in the MISP dashboard ButtonWidget configuration. Dashboard widget URLs were validated only when the widget was rendered and were not validated when the configuration was saved. As a result, an authenticated user able to modify dashboard widg...

EUVD-2026-70503

A persistent unsafe URL injection vulnerability exists in the MISP dashboard ButtonWidget configuration. Dashboard widget URLs were validated only when the widget was rendered and were not validated when the configuration was saved. As a result, an authenticated user able to modify dashboard widg...

CVE-2026-85230

CVE-2026-85230 is a persistent unsafe URL injection vulnerability in the MISP dashboard ButtonWidget configuration. Dashboard widget URLs were validated only at render time, not when saved, allowing an authenticated user to persist arbitrary URLs—including javascript: scheme values—through either...

CVE-2026-85230 MISP Dashboard Button Widget Allows Persistent JavaScript URL Injection

A persistent unsafe URL injection vulnerability exists in the MISP dashboard ButtonWidget configuration. Dashboard widget URLs were validated only when the widget was rendered and were not validated when the configuration was saved. As a result, an authenticated user able to modify dashboard widg...

CVE-2026-84662

Jenkins LDAP Plugin (ldap) versions 807.809.vd3a_4e5e4ec98 and earlier suffer from an improper access control flaw that enables Server-Side Request Forgery (SSRF) . The plugin's use of Stapler's @DataBoundConstructor annotation on a constructor that connects to a specified URL allows attackers ca...

cve-2025-24514

🔥 CVE-2025-24514 रिमोट भेद्यता जाँच PoC यह स्क्रिप्ट CVE-2025-24514 भेद्यता ingress-nginx के auth-url इंजेक्शन के माध्यम से NGINX कॉन्फ़िगरेशन हेरफेर और RCE संभावना के लिए रिमोटली जाँच करने वाला Python-आधारित PoC है। 🧠 भेद्यता अवलोकन CVE-2025-24514 Kubernetes Ingress Controller में ingress-nginx...

CVE-2026-82681

Improper Encoding or Escaping of Output vulnerability in ash-project ashadmin lets an attacker who controls a record's string primary key rewrite the target of AshAdmin's row-action links. The Table, DataTable, and Show components built row-action URLs by raw string interpolation, splicing the...

Linux Distros Unpatched Vulnerability : CVE-2026-82249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers. Attackers can supply URLs containing bare carria...

EUVD-2026-67841

Yamcs is a mission control framework. Prior to 5.9.4, Yamcs reflects an attacker-controlled redirecturi parameter from GET /auth/authorize into yamcs-core/src/main/resources/auth/templates/authorize.html without adequate HTML escaping by yamcs-core/src/main/java/org/yamcs/http/auth/AuthHandler.ja...

EUVD-2026-65518

A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL...

gitpython: GitPython: Environment variable exfiltration via attacker-controlled clone URL

A flaw was found in GitPython. A remote attacker can exploit a vulnerability in the Repo.clonefrom method by providing a specially crafted Git repository URL. This URL can contain references to environment variables, which are then expanded and included in the URL. This allows the attacker to...

CVE-2026-76842

The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL survive into the outgoing request. The payment get, capture, cancel, paymentRefund create, total, list, get, advancedPayment get,...