129 matches found
CVE-2025-62424 ClipBucket path traversal vulnerability in template editor allows arbitrary file read and write
ClipBucket is a web-based video-sharing platform. In ClipBucket version 5.5.2 - 146 and earlier, the /adminarea/templateeditor.php endpoint is vulnerable to path traversal. The validation of the file-loading path is inadequate, allowing authenticated administrators to read and write arbitrary fil...
EUVD-2017-15862
Malware in sbrugna...
EUVD-2018-11209
Malware in sbrugna...
EUVD-2020-2916
Malware in sbrugna...
EUVD-2017-15863
Malware in sbrugna...
EUVD-2020-2851
Malware in sbrugna...
EUVD-2020-14422
Malware in sbrugna...
EUVD-2025-26148
Malicious code in bioql PyPI...
EUVD-2023-49171
Malicious code in bioql PyPI...
EUVD-2025-24938
Malicious code in bioql PyPI...
EUVD-2024-49358
Malicious code in bioql PyPI...
EUVD-2023-40969
Malicious code in bioql PyPI...
ZrLog 安全漏洞
ZrLog is a blogging system developed in Java language by xiaochun individual developer. A security vulnerability exists in ZrLog 3.1.5 and earlier versions, which stems from cross-site scripting due to incorrect manipulation of the parameter footerLink in the file /api/admin/template/config...
CVE-2025-8975
A vulnerability was identified in givanz Vvveb up to 1.0.5. This affects an unknown part of the file admin/template/content/edit.tpl. The manipulation of the argument slug leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...
Malicious code in robust-free-bootstrap-admin-template (npm)
The package robust-free-bootstrap-admin-template was found to contain malicious code...
CVE-2025-8975
CVE-2025-8975 affects givanz Vvveb up to 1.0.5, where the slug parameter is mishandled in the file admin/template/content/edit.tpl, enabling cross-site scripting. The issue can be exploited remotely and the exploit has been disclosed publicly. A fix is available in version 1.0.6; patch hash: 84c1...
CVE-2025-8975: Improper Neutralization of Input During Web Page Generation
A vulnerability was identified in givanz Vvveb up to 1.0.5. This affects an unknown part of the file admin/template/content/edit.tpl. The manipulation of the argument slug leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...
PT-2025-33404 · Unknown · Givanz Vvveb
Name of the Vulnerable Software and Affected Versions: givanz Vvveb versions up to 1.0.5 Description: A vulnerability was identified in givanz Vvveb up to version 1.0.5. This affects an unknown part of the file admin/template/content/edit.tpl. The manipulation of the argument slug leads to...
