CVE-2018-11012

ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminController.java.

• CWE-79

• https://github.com/ruibaby/halo/issues/9Exploit, Issue Tracking, Third Party Advisory
• https://github.com/ruibaby/halo/issues/9Exploit, Issue Tracking, Third Party Advisory

Published

May 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11007A Memory Leak issue was discovered in K7Computing K7AntiViru…5.5
• CVE-2018-11008An Incorrect Access Control issue was discovered in K7Comput…5.5
• CVE-2018-11009A Buffer Overflow issue was discovered in K7Computing K7Anti…7.8
• CVE-2018-1101Ansible Tower before version 3.2.4 has a flaw in the managem…
• CVE-2018-11010A Buffer Overflow issue was discovered in K7Computing K7Anti…7.8
• CVE-2018-11011ruibaby Halo 0.0.2 has stored XSS via the commentAuthor fiel…
• CVE-2018-11013Stack-based buffer overflow in the websRedirect function in …
• CVE-2018-11017The newVar_N function in decompile.c in libming through 0.4.…
• CVE-2018-11018An issue was discovered in PbootCMS v1.0.7. Cross-site reque…
• CVE-2018-11019kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel co…
• CVE-2018-1102A flaw was found in source-to-image function as shipped with…
• CVE-2018-11020kernel/omap/drivers/rpmsg/rpmsg_omx.c in the kernel componen…