490101 matches found
UBUNTU-CVE-2026-56704
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
cyber-apocalypse-2026-salt-crown
Cyber Apocalypse CTF 2026: The Salt Crown — Writeups Writeups...
CVE-2026-56704
Adminer versions before 5.4.3 are vulnerable to cross-site scripting (XSS) caused by unsanitized database server version strings being inserted into [removed] tags that carry valid CSP nonces. An attacker who controls a rogue MySQL server can return a crafted version string that breaks out of the...
CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
CVE-2026-56704
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
EUVD-2026-65202
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
CVE-2026-56704
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String
Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...
SUSE CVE-2026-75038
UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...
EUVD-2026-65176
Unauthenticated Cross Site Scripting XSS in Stripe Payments = 2.1.2 versions...
EUVD-2026-65159
Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...
EUVD-2026-65170
Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...
EUVD-2026-65174
Unauthenticated Privilege Escalation in TranslatePress = 3.3.2 versions...
EUVD-2026-65173
Subscriber Broken Access Control in AutomatorWP = 5.8.3 versions...
EUVD-2026-65172
Unauthenticated PHP Object Injection in The Events Calendar = 6.17.2 versions...
EUVD-2026-65168
Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...
EUVD-2026-65163
Unauthenticated Cross Site Scripting XSS in Boost = 2.0.4 versions...