
CVE-2026-32722
Bloomberg Memray’s Stored XSS via Unescaped Command-Line Metadata
educationpapers-researchpenetration-testing+3
15 months ago

Bloomberg Memray’s Stored XSS via Unescaped Command-Line Metadata

Threat intelligence report analyzing the xz-utils backdoor vulnerability (CVE-2024-3094)

Proof-of-concept for CVE-2024-48415: stored XSS vulnerability in itsourcecode Loan Management System v1.0 via borrower profile fields. Includes…

Documentation of CVE-2025-65300: a stored Cross-Site Scripting (XSS) vulnerability in the Coohom SaaS platform's Account Settings profile address…

Tools for working with ImageMagick to handle arbitrary file read vulnerabilities. Generate, read, and apply profile information to PNG files using a…