Search: “stored xss”

3 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 183 Exploit / PoC 60 Ransomware 23 Data breach 21 Malware 17 Threat actor 7 AI safety & security 4 Advisory 3 Phishing & fraud 3 Policy & legal 1 AI tools & infra 1

SeverityAll critical 163 high 68 medium 82 low 9 info 1

Rockwell Automation ArmorStart LT

CISA flags two flaws (CVE-2026-19471, CVE-2026-19472) in Rockwell Automation ArmorStart LT <=v2.001: stored XSS and web server denial-of-service.

Rockwell Automation reported two issues in the embedded web server of ArmorStart LT v2.001 and earlier. CVE-2026-19471 involves multiple stored cross-site scripting flaws (CVSS 7.3) where unsanitized input is stored server-side and executes in other users' browsers. CVE-2026-19472 is a denial-of-service issue (CVSS 7.5) triggered by a crafted HTTP PUT request that exhausts web server resources. No public exploitation has been reported to CISA.

CISA AdvisoriesSep 3, 12:00 UTC · 13d agoAdvisory 3 sources CVE-2026-19471 CVE-2026-19472

Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability

Cisco fixed a stored cross-site scripting flaw in Industrial Ethernet 1000 series switches exploitable by authenticated remote users.

Insufficient validation of user-supplied input in the web-based management interface of Cisco Industrial Ethernet 1000 Series Switches allows stored XSS. An authenticated remote attacker can inject malicious code into specific interface pages and execute arbitrary script in another user's context. Exploitation requires valid credentials; Cisco has released software updates.

Cisco Security AdvisoriesAug 19, 16:00 UTC · 28d agoAdvisory

CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero

The Hacker NewsMar 20, 04:36 UTC · Mar 20, 2026Advisory in the wildCVE-2025-66376 CVE-2026-20963 CVE-2026-20131+5 CVEs