469 matches found
EUVD-2026-5678
A reflected cross-site scripting XSS vulnerability in the PDF export functionality of the TYDAC AG MAP+ solution allows unauthenticated attackers to craft a malicious URL, that if visited by a victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered through...
CVE-2026-20985
Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability...
CVE-2026-1861
creationtimestamp| type| source ---|---|--- 2026-02-03 22:20:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdyfg2mq6w2a 2026-02-04 07:18:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116011138463439555 2026-02-04 13:00:14+00:00| seen|...
CVE-2026-20407
creationtimestamp| type| source ---|---|--- 2026-02-03 00:09:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw332voxj24...
CVE-2025-15288
creationtimestamp| type| source ---|---|--- 2026-01-29 23:15:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlw5qcws22t...
CVE-2020-36976
creationtimestamp| type| source ---|---|--- 2026-01-27 20:17:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdglcrzlsq2c...
CVE-2026-22809
creationtimestamp| type| source ---|---|--- 2026-01-24 21:25:12+00:00| seen| https://gist.github.com/alon710/9d9c15020305bb7e2d3e52c842759649 2026-01-24 22:40:42+00:00| seen| https://gist.github.com/alon710/9abd26d07048f88e13b0eccb19e938c5...
GHSA-3F44-XW83-3PMG
creationtimestamp| type| source ---|---|--- 2026-01-24 21:25:09+00:00| seen| https://gist.github.com/alon710/e66409c13b6f73b39a0b9aa2fbaab038 2026-01-24 22:35:03+00:00| seen| https://gist.github.com/alon710/d8fd91f8283e225a106f76c357b7f3dc 2026-01-24 22:40:38+00:00| seen|...
GHSA-6PMJ-XJXP-P8G9
creationtimestamp| type| source ---|---|--- 2026-01-24 21:23:05+00:00| seen| https://gist.github.com/alon710/8c70e7f988a1a227e1f9723ebe8d32bd 2026-01-24 22:19:56+00:00| seen| https://gist.github.com/alon710/ee6559d38739c068820837243e6a26a2 2026-01-24 22:19:58+00:00| seen|...
CVE-2025-2204
creationtimestamp| type| source ---|---|--- 2026-01-23 14:33:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md3w7z47ue2j...
CVE-2025-57787
A reflected cross-site scripting xss vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2026-24021
creationtimestamp| type| source ---|---|--- 2026-01-21 07:18:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcw4xve6h323...
CVE-2025-58080
A reflected cross-site scripting xss vulnerability exists in the modifyHL7App functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-53516
A reflected cross-site scripting xss vulnerability exists in the downloadZip functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-54861
A reflected cross-site scripting xss vulnerability exists in the modifyCoercion functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-57787
A reflected cross-site scripting xss vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2025-40644 Reflected Cross-Site Scripting (XSS) in QRGen's Riftzilla
Reflected Cross-Site Scripting XSS vulnerability in Riftzilla's QRGen. This vulnerability allows an attavker to execute JavaScript code in the victim's browser by sending them a malicious URL using the 'id' parameter in '/article.php'. This vulnerability can be exploited to steal sensitive user...
PT-2026-3599
Name of the Vulnerable Software and Affected Versions MedDream PACS Premium version 7.3.6.870 Description A reflected cross-site scripting xss issue exists in the emailfailedjob functionality. A crafted URL can lead to arbitrary javascript code execution. An attacker can provide a malicious URL t...