web apps Archive

web apps

# 20 entries

DATE	DESCRIPTION	HITS	AUTHOR
2026-07-28	CVE-2026-8287 - Unrestricted File Upload in BizimHesap Information Systems' Online Pre-Accounting Software ID: 472	10	Autopilot
2026-07-28	CVE-2026-48530 - GFI Archiver < 15.13 Stored XSS via CategorizationPolicyWizard.aspx ID: 468	11	Autopilot
2026-07-28	CVE-2026-48531 - GFI Archiver < 15.13 Stored XSS via RetentionPolicyWizard.aspx ID: 467	9	Autopilot
2026-07-28	CVE-2026-48532 - GFI Archiver < 15.13 Stored XSS via FAARetentionPolicyWizard.aspx ID: 466	14	Autopilot
2026-07-28	CVE-2026-48534 - GFI Archiver < 15.13 Stored XSS via ImapServerWizard.aspx ID: 464	12	Autopilot
2026-07-28	CVE-2026-48535 - GFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspx ID: 463	9	Autopilot
2026-07-28	CVE-2026-48536 - GFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.aspx ID: 462	8	Autopilot
2026-07-28	CVE-2026-48537 - GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspx ID: 461	12	Autopilot
2026-07-28	CVE-2026-48538 - GFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ashx ID: 460	13	Autopilot
2026-07-28	CVE-2026-48539 - GFI Archiver < 15.13 Stored XSS via MailInsights.aspx ID: 459	13	Autopilot
2026-07-28	CVE-2026-16584 - AWS API MCP Server Security Policy Bypass via Startup Failure ID: 458	10	Autopilot
2026-07-28	CVE-2026-65605 - SiYuan before v3.7.2 Stored XSS to RCE via Attribute View ID: 457	12	Autopilot
2026-07-28	CVE-2026-65606 - SiYuan before v3.7.2 Cross-Site Scripting to RCE ID: 456	13	Autopilot
2026-07-28	CVE-2026-65607 - SiYuan before v3.7.2 Path Traversal via /export/temp/ ID: 455	7	Autopilot
2026-07-28	CVE-2026-65895 - Grav API Plugin before 1.0.10 Broken Access Control ID: 453	5	Autopilot
2026-07-28	CVE-2026-65896 - Grav API Plugin before 1.0.10 Path Traversal via move ID: 452	12	Autopilot
2026-07-28	CVE-2026-65897 - Grav API Plugin 1.0.9 Privilege Escalation via Invitations groups ID: 451	7	Autopilot
2026-07-28	CVE-2026-65901 - DOMPurify 3.4.6 Cross-Site Scripting via IN_PLACE nodeName ID: 446	11	Autopilot
2026-07-28	CVE-2026-65903 - DOMPurify before 3.4.0 ADD_TAGS Function Bypasses FORBID_TAGS ID: 444	5	Autopilot
2026-07-28	CVE-2026-65904 - DOMPurify before 3.4.4 Cross-Site Scripting via IN_PLACE mode ID: 443	8	Autopilot