SUSE SLED15 / SLES15 Security Update : go1.25 (SUSE-SU-2026:1862-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1862-1 advisory. This update for go1.25 fixes the following issues Security issues: - CVE-2026-33811: net: crash when handling...

EUVD-2020-2577

Malware in sbrugna...

EUVD-2016-9477

Malware in sbrugna...

EUVD-2021-32844

Malicious code in bioql PyPI...

EUVD-2023-0773

Malicious code in bioql PyPI...

EUVD-2023-50531

Malicious code in bioql PyPI...

EUVD-2022-3305

Malicious code in bioql PyPI...

Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xml

Impact The HTML sanitizer, introduced in version 14.6-rc-1, allowed the injection of arbitrary HTML code and thus cross-site scripting via invalid data attributes. This can be exploited, e.g., via the link syntax in any content that supports XWiki syntax like comments in XWiki:...

MGASA-2020-0339 Updated roundcubemail packages fix security vulnerabilities

Fix potential XSS issue in HTML editor of the identity signature input Fix cross-site scripting XSS via HTML messages with malicious svg content CVE-2020-16145 Fix cross-site scripting XSS via HTML messages with malicious math content...

LANGO Codeigniter Multilingual Script 1.0 Cross Site Scripting Vulnerability

LANGO Codeigniter Multilingual Script version 1.0 suffers from html injection and cross site scripting vulnerabilities. Exploit Title: LANGO - Codeigniter Multilingual Script 1.0 - HTML Injection and Stored XSS Exploit Author: Ismail Tasdelen Vendor Homepage: http://pokkho.com/lango/ Software Lin...

CVE-2017-11716

MetInfo through 5.3.17 allows stored XSS via HTML Edit Mode...

WSO2 Carbon 4.4.5 - Persistent Cross-Site Scripting

Exploit for jsp platform in category web applications + Credits: John Page aka HYP3RLINX Vendor: ============= www.wso2.com Product: ================== Ws02Carbon v4.4.5 WSO2 Carbon is the core platform on which WSO2 middleware products are built. It is based on Java OSGi technology, which allows...

Kolay PageRank Sorgulama Cross Site Scripting

Application Name: Kolay PageRank Sorgulama XSS Vuln. Author: darkTR Date: 14.08.2011 Example: http://scripti.org/demo.php?id=2448 Vulnerable Type: Reflected XSS Fixed: Zararlı Karakterler Filitrelenmelidir. // Post Search Box HTML İnjection ; darkTR XSS Vuln ; alertdocument.domain...

Software Index (XSS HTML) Vulnerability

Exploit for php platform in category web applications ======================================= Software Index XSS HTML Vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...

FileNice Script Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================== FileNice Script Multiple Vulnerabilities ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

AV Arcade Search Field XSS/HTML Injection Vulnerability

Exploit for php platform in category web applications ======================================================= AV Arcade Search Field XSS/HTML Injection Vulnerability ======================================================= Exploit Title: AV Arcade Search Field /includes/misc/search.php XSS/HTML...

CuteNews 1.4.6 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36971/info CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and security-bypass issues. Note that exploits for some of the issues may...

RedCMS 0.1 - 'register.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17336/info RedCMS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The application is prone to HTML-injection and SQL-injection vulnerabilities. A...