CVE-2026-15321: Cross Site Scripting in MyEMS
CVE-2026-15321 is a cross-site scripting (XSS) vulnerability in MyEMS affecting versions 6.0 through 6.4.0. The issue exists in the on_post function of the myems-api/core/svg.py file within the Admin…
Read the full articleYou might also wanna read
CVE-2025-14773: Cross-Site Scripting Vulnerability in ABB T-MAC Plus (Version 4.0-24)
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus. This issue affects T-M
nvd.nist.gov·1mo ago
Understanding and mitigating the Jinja2 XSS vulnerability (CVE-2024-22195)
On January 11th, 2024, a significant security vulnerability was disclosed in Jinja2, a widely used Python templating library. Identified as
Technical Analysis of CVE-2025-10035: A CVSS 10.0 Vulnerability in Fortra GoAnywhere MFT
File transfer used to be simple fun - fire up your favourite FTP client, log in to a glFTPd site, and you were done. Fast forward to 2025, a
labs.watchtowr.com·9mo ago
WAF - WAF Release - 2026-04-07
This week's release introduces new detections for a critical Remote Code Execution (RCE) vulnerability in MCP Server (CVE-2026-23744), along
Broadcom Discloses Three Stored XSS Vulnerabilities in VMware Cloud Foundation Operations
Broadcom has disclosed three stored cross-site scripting (XSS) vulnerabilities affecting VMware Cloud Foundation Operations and several rela
cybersecuritynews.com·1mo ago
CISA adds actively exploited SharePoint RCE flaw to KEV catalog after Microsoft downplayed risk
Attackers need little more than a valid SharePoint account to execute code on vulnerable on-prem servers
theregister.com·7d agoCISA adds actively exploited SharePoint RCE flaw to KEV catalog after Microsoft downplayed risk
Attackers need little more than a valid SharePoint account to execute code on vulnerable on-prem servers
theregister.com·7d agoCISA adds actively exploited SharePoint RCE flaw to KEV catalog after Microsoft downplayed risk
Attackers need little more than a valid SharePoint account to execute code on vulnerable on-prem servers
theregister.com·7d ago
Comments
Sign in to join the conversation.
No comments yet. Be the first.