CVE-2026-39628

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in kutethemes DukaMarket dukamarket allows Code Injection.This issue affects DukaMarket: from n/a through = 1.3.0...

The vulnerability of the GNOME Shell’s graphical shell in the GNOME desktop environment of Linux operating systems allows a hacker to execute arbitrary code.

The vulnerability of the GNOME Shell’s graphical interface in GNOME desktop environments on Linux operating systems is related to the lack of measures taken to neutralize the script in the web page attributes. Exploiting this vulnerability allows a remote attacker to execute arbitrary JavaScript...

Manipulating the window can be used to spoof the page address

Web page scripts can be used to alter the size of the browser window. In some cases, this manipulation can cause the wrong part of the Web page address to be displayed in the Address Bar, so that the part that is initially visible to the user is not the start of the address, and may contain conte...