Lucene search
+L

150557 matches found

BDU FSTEC
BDU FSTEC
•added 2026/02/09 12:00 a.m.•19 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the OpenSky flight planning and operational management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks XSS...

3.7CVSS5.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/09 12:00 a.m.•15 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the OpenSky flight planning and operational management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks XSS...

3.7CVSS5.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/09 12:00 a.m.•11 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures taken to protect the website structure, allows a intruder to gain unauthorized access to the protected information.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

6.8CVSS5.4AI score
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/09 12:00 a.m.•4 views

CVE-2025-7799: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Zirve Information Technologies Inc. E-Taxpayer Accounting Website allows Reflected XSS. This issue affects e-Taxpayer Accounting Website: through 07082025...

8.6CVSS5.8AI score0.00332EPSS
SaveExploits0References2
OSV
OSV
•added 2026/02/08 4:15 p.m.•16 views

CVE-2026-2160

A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=savepackage. The manipulation of the argument Title leads to cross site scripting. The attack can be initiat...

6.1CVSS4.2AI score0.00312EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/08 4:15 p.m.•23 views

CVE-2026-2160

A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=savepackage. The manipulation of the argument Title leads to cross site scripting. The attack can be initiat...

6.1CVSS0.00312EPSS
SaveExploits1References5
OSV
OSV
•added 2026/02/08 4:15 p.m.•17 views

CVE-2026-2159

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected is an unknown function of the file /tourism/classes/Master.php?f=register of the component Registration. Executing a manipulation of the argument firstname/lastname/username can lead to cross site scripting. I...

6.1CVSS4.1AI score0.00407EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/02/08 3:32 p.m.•21 views

EUVD-2026-5789

A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=savepackage. The manipulation of the argument Title leads to cross site scripting. The attack can be initiat...

6.1CVSS3.6AI score0.00312EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/02/08 3:32 p.m.•12 views

CVE-2026-2160 SourceCodester Simple Responsive Tourism Website Master.php cross site scripting

A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=savepackage. The manipulation of the argument Title leads to cross site scripting. The attack can be initiat...

5.3CVSS3.7AI score0.00312EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/02/08 3:32 p.m.•10 views

CVE-2026-2160

A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=savepackage. The manipulation of the argument Title leads to cross site scripting. The attack can be initiat...

5.3CVSS3.7AI score0.00312EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2026/02/08 3:32 p.m.•58 views

CVE-2026-2160 SourceCodester Simple Responsive Tourism Website Master.php cross site scripting

A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=savepackage. The manipulation of the argument Title leads to cross site scripting. The attack can be initiat...

5.3CVSS0.00312EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/02/08 3:32 p.m.•13 views

CVE-2026-2159 SourceCodester Simple Responsive Tourism Website Registration Master.php cross site scripting

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected is an unknown function of the file /tourism/classes/Master.php?f=register of the component Registration. Executing a manipulation of the argument firstname/lastname/username can lead to cross site scripting. I...

5.3CVSS3.9AI score0.00407EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/02/08 3:32 p.m.•16 views

EUVD-2026-5790

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected is an unknown function of the file /tourism/classes/Master.php?f=register of the component Registration. Executing a manipulation of the argument firstname/lastname/username can lead to cross site scripting. I...

6.1CVSS3.5AI score0.00407EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/02/08 3:32 p.m.•53 views

CVE-2026-2159 SourceCodester Simple Responsive Tourism Website Registration Master.php cross site scripting

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected is an unknown function of the file /tourism/classes/Master.php?f=register of the component Registration. Executing a manipulation of the argument firstname/lastname/username can lead to cross site scripting. I...

5.3CVSS0.00407EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/02/08 12:00 a.m.•35 views

PT-2026-6990

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Responsive Tourism Website version 1.0 Description A flaw exists in SourceCodester Simple Responsive Tourism Website version 1.0, specifically within an unknown function of the file /tourism/classes/Master.php?f=register...

5.3CVSS3.7AI score0.00407EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/02/08 12:00 a.m.•32 views

PT-2026-6991

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Responsive Tourism Website version 1.0 Description A flaw exists in SourceCodester Simple Responsive Tourism Website that allows for cross site scripting. This issue is triggered through manipulation of the Title argument...

5.3CVSS4AI score0.00312EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/08 12:00 a.m.•9 views

CVE-2026-2160: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=savepackage. The manipulation of the argument Title leads to cross site scripting. The attack can be initiat...

6.1CVSS3.7AI score0.00312EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/02/08 12:00 a.m.•31 views

Simple Responsive Tourism Website 代码注入漏洞

Simple Responsive Tourism Website is a simple responsive tourism website. Version 1.0 of Simple Responsive Tourism Website has a code injection vulnerability. This vulnerability stems from incorrect handling of the parameters firstname, lastname, and username in the...

6.1CVSS5.7AI score0.00407EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/08 12:00 a.m.•14 views

CVE-2026-2159: Improper Neutralization of Input During Web Page Generation

A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected is an unknown function of the file /tourism/classes/Master.php?f=register of the component Registration. Executing a manipulation of the argument firstname/lastname/username can lead to cross site scripting. I...

6.1CVSS3.9AI score0.00407EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/02/06 9:32 p.m.•8 views

CVE-2026-25760 Website Path Traversal / Arbitrary File Read (Authenticated) in Sliver

Sliver is a command and control framework that uses a custom Wireguard netstack. Prior to 1.6.11, a path traversal in the website content subsystem lets an authenticated operator read arbitrary files on the Sliver server host. This is an authenticated path traversal / arbitrary file read issue, a...

6.5CVSS8.1AI score0.00564EPSS
SaveExploits1References2
Rows per page
Query Builder