4684 matches found
EUVD-2022-1139
Malicious code in bioql PyPI...
EUVD-2025-16314
Malicious code in bioql PyPI...
EUVD-2022-52130
Malicious code in bioql PyPI...
EUVD-2023-57720
Malicious code in bioql PyPI...
EUVD-2024-35545
Malicious code in bioql PyPI...
CVE-2025-11125
A vulnerability was found in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. Affected by this vulnerability is an unknown functionality of the file /connectionerror.php of the component Error Message Handler. Performing manipulation of the argument Error results i...
CVE-2025-11125: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. Affected by this vulnerability is an unknown functionality of the file /connectionerror.php of the component Error Message Handler. Performing manipulation of the argument Error results i...
CVE-2025-11125 langleyfcu Online Banking System Error Message connection_error.php cross site scripting
A vulnerability was found in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. Affected by this vulnerability is an unknown functionality of the file /connectionerror.php of the component Error Message Handler. Performing manipulation of the argument Error results i...
CVE-2025-11125
Langleyfcu Online Banking System is affected by CVE-2025-11125. A cross-site scripting vulnerability exists in the Error Message Handler’s /connection_error.php where manipulation of the Error parameter can be exploited remotely. The issue affects versions prior to 57437e6400ce0ae240e692c24e6346b...
CVE-2025-11125 langleyfcu Online Banking System Error Message connection_error.php cross site scripting
A vulnerability was found in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. Affected by this vulnerability is an unknown functionality of the file /connectionerror.php of the component Error Message Handler. Performing manipulation of the argument Error results i...
PT-2025-39796
Name of the Vulnerable Software and Affected Versions langleyfcu Online Banking System versions prior to 57437e6400ce0ae240e692c24e6346b8d0c17d7a Description A cross site scripting issue exists in the Error Message Handler component of langleyfcu Online Banking System. The issue is related to...
CVE-2025-1396
A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...
CVE-2025-1396 Username Enumeration in Multiple WSO2 Products with Multi-Attribute Login Enabled
A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...
PT-2025-39521
Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description A username enumeration issue exists when Multi-Attribute Login is enabled. The system provides a different response for existing and non-existing usernames, regardless of the validate...
CVE-2025-26333
Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data. A remote attacker could potentially exploit this vulnerability, leading to information exposure...
CVE-2025-26333
Dell BSAFE Crypto-J contains an information disclosure flaw: error messages may reveal sensitive environment details and associated data to remote attackers (CVE-2025-26333). Affected product is Dell BSAFE Crypto-J; impact is information exposure with HIGH confidentiality impact per NVD. Dell has...
CVE-2025-26333
Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data. A remote attacker could potentially exploit this vulnerability, leading to information exposure...
PT-2025-39408
Name of the Vulnerable Software and Affected Versions Dell Crypto-J affected versions not specified Description The software generates an error message containing sensitive information about its environment and associated data. A remote attacker could potentially exploit this issue, leading to...
CVE-2024-6429 Content Spoofing in Multiple WSO2 Products via Error Message Injection
A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Under certain conditions, error messages are passed through URL parameters without validation, allowing malicious actors to inject arbitrary content into the UI. By exploiting this...
CVE-2024-6429
The CVE-2024-6429 entry describes a content spoofing vulnerability in WSO2 products caused by improper handling/validation of error messages passed through URL parameters, enabling attackers to inject arbitrary UI content and facilitate social-engineering attacks. Affected components include WSO2...