CVE-2019-15532

CyberChef before 8.31.2 allows XSS in core/operations/TextEncodingBruteForce.mjs.

• CWE-79

• https://github.com/gchq/CyberChef/commit/01f0625d6a177f9c5df9281f12a27c814c2d8bcfPatch, Third Party Advisory
• https://github.com/gchq/CyberChef/compare/v8.31.1...v8.31.2Patch, Third Party Advisory
• https://github.com/gchq/CyberChef/issues/539Exploit, Third Party Advisory
• https://github.com/gchq/CyberChef/issues/544Issue Tracking, Patch, Third Party Advisory
• https://github.com/gchq/CyberChef/commit/01f0625d6a177f9c5df9281f12a27c814c2d8bcfPatch, Third Party Advisory
• https://github.com/gchq/CyberChef/compare/v8.31.1...v8.31.2Patch, Third Party Advisory
• https://github.com/gchq/CyberChef/issues/539Exploit, Third Party Advisory
• https://github.com/gchq/CyberChef/issues/544Issue Tracking, Patch, Third Party Advisory

Published

Aug 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15527An issue was discovered on D-Link DIR-823G devices with firm…
• CVE-2019-15528An issue was discovered on D-Link DIR-823G devices with firm…
• CVE-2019-15529An issue was discovered on D-Link DIR-823G devices with firm…
• CVE-2019-1553Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-15530An issue was discovered on D-Link DIR-823G devices with firm…
• CVE-2019-15531GNU Libextractor through 1.9 has a heap-based buffer over-re…6.5
• CVE-2019-15533XENFCoreSharp before 2019-07-16 allows SQL injection in web/…
• CVE-2019-15534Raml-Module-Builder 26.4.0 allows SQL Injection in PostgresC…
• CVE-2019-15535Tasking Manager before 3.4.0 allows SQL Injection via custom…
• CVE-2019-15536The Acclaim block plugin before 2019-06-26 for Moodle allows…
• CVE-2019-15537The proxystatistics module before 3.1.0 for SimpleSAMLphp al…
• CVE-2019-15538An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs…7.5