CVE-2026-43915

Coturn is a free open source implementation of TURN and STUN Server. Versions prior to 4.11.0 contain a stored cross-site scripting XSS vulnerability in the web-admin HTTPS interface. An attacker who can create a TURN allocation with a crafted USERNAME value can inject HTML/JavaScript that execut...

Vvveb 跨站脚本漏洞

Vvveb is a powerful and easy-to-use CMS developed by Givan’s developers, used for building websites, blogs, or e-commerce stores. Versions of Vvveb prior to 1.0.8.3 had a cross-site scripting vulnerability. This vulnerability stemmed from the Signup::addUser controller in the customer registratio...

EUVD-2018-10989

Malware in sbrugna...

CVE-2018-19286

The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value along with an arbitrary username value, and then creating and sharing a note...

Network fun shopping system landing any of the account Bugs(except admin)-vulnerability warning-the black bar safety net

Run into a lot of asp shopping Station is network fun kernel change, but without a column outside of both the existence of this vulnerability, including the latest and most older network fun, relatively tasteless, can't get webshell to. But the harm is relatively large, you can login and modify a...