CVE-2026-62948: OpenWrt DHCPv6 Hostname Injection Leading to Stored XSS
CVE-2026-62948 is a DHCPv6 hostname-injection flaw in OpenWrt that can produce stored cross-site scripting (XSS) when an administrator opens the LuCI leases…
Tag: stored XSS
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
A Russian state-sponsored espionage group exploited a zero-day vulnerability in Zimbra's webmail client to steal emails, passwords, and two-factor authentication recovery codes…
Exchange Server Stored Cross-Site Scripting Vulnerability
CVE-2026-55008 is a stored cross-site scripting vulnerability in Outlook Web Access (OWA) with a CVSS score of 9.6. It is filed under…
Critical Zimbra Classic Web Client XSS Flaw Enables Code Execution via Crafted Emails
Zimbra has disclosed a critical stored cross-site scripting (XSS) vulnerability in its Classic Web Client that could allow attackers to execute arbitrary…
CVE-2025-27915: Zimbra Classic Web Client Stored XSS Vulnerability
A stored cross-site scripting (XSS) vulnerability in Zimbra's Classic Web Client (CVSS 5.4) that was allegedly exploited as a zero-day against the…