Search Vulnerabilities

Kiota: Code Generation Literal Injection

WWBN AVideo YPTSocket WebSocket Broadcast Relay Leads to Unauthenticated Cross-User JavaScript Execution via Client-Side eval() Sinks

Bagisto Custom Scripts cross site scripting

hass-cli: Handling of user-supplied Jinja2 templates

WebSystems WebTOTUM Calendar cross site scripting

Spinnaker vulnerable to RCE via expression parsing due to unrestricted context handling

Pagekit CMS StringStorage Template PhpEngine.php evaluate eval injection

Vvveb < 1.0.8.1 Code Injection via Installation Endpoint

erponline.xyz ERP Online Inventory Edit Item cross site scripting

Qibo CMS Internal Message cross site scripting

Yifang CMS Extended Management L_rbac_admin.php store cross site scripting

BichitroGan ISP Billing Software Pool List add cross site scripting

BichitroGan ISP Billing Software Profile users-view cross site scripting

BichitroGan ISP Billing Software Customer edit cross site scripting

1024bit extend-deep index.js prototype pollution

langgenius dify ImagePreview image-preview.tsx openInNewTab cross site scripting

ProjectDiscovery Nuclei 3 before 3

modelscope agentscope _python.py execute_shell_command code injection

langflow-ai langflow Frontend React Component Rendering edit-message.tsx cross site scripting

brikcss merge prototype pollution