8462 matches found
Frappe Learning 信息泄露漏洞
Frappe Learning is an easy-to-use open source learning management system from Frappe Open Source. An information disclosure vulnerability exists in Frappe Learning versions prior to 2.38.0, which stems from student uploaded assignment attachments being stored as public files, which could lead to...
BIT-KIBANA-2025-25009 Kibana Cross-Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation in Kibana can lead to Stored XSS via case file upload...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via SVG files in diagram type products. An attacker can execute arbitrary web scripts or HTML in the context of a user's browser by uploading a specially crafted SVG file. Details Cross-site scripting or XSS is ...
CVE-2025-11351
A weakness has been identified in code-projects Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file /admin/editpicexec.php. This manipulation of the argument image causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has...
Campcodes Advanced Online Voting Management System 代码问题漏洞
CampCodes Advanced Online Voting Management System is an advanced online voting management system from CampCodes Philippines, Inc. A code issue vulnerability exists in Campcodes Advanced Online Voting Management System version 1.0, which stems from the incorrect manipulation of the parameter phot...
OPEXUS FOIAXpress 安全漏洞
OPEXUS FOIAXpress is an information disclosure management software from OPEXUS USA. A security vulnerability exists in OPEXUS FOIAXpress versions prior to 11.13.3.0, which stems from allowing administrative users to upload SVG images embedded with JavaScript or other content, which could lead to...
CVE-2025-61681
KUNO CMS is a fully deployable full-stack blog application. Versions 1.3.13 and below contain validation flaws in its file upload functionality that can be exploited for stored XSS. The upload endpoint only validates file types based on Content-Type headers, lacks file content analysis and...
CVE-2025-61772 Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2, Rack::Multipart::Parser can accumulate unbounded data when a multipart part’s header block never terminates with the required blank line CRLFCRLF. The parser keeps appending incoming bytes to memory witho...
EUVD-2019-17691
Malware in sbrugna...
EUVD-2021-0914
Malware in sbrugna...
EUVD-2016-2099
Malware in sbrugna...
EUVD-2010-2337
Malware in sbrugna...
EUVD-2020-6188
Malware in sbrugna...
EUVD-2020-8110
Malware in sbrugna...
EUVD-2012-6578
Malware in sbrugna...
EUVD-2021-0064
Malware in sbrugna...
EUVD-2021-23734
Malware in sbrugna...
EUVD-2020-28947
Malware in sbrugna...