407 matches found
Marshmallow has DoS in Schema.load(many)
Impact Schema.loaddata, many=True is vulnerable to denial of service attacks. A moderately sized request can consume a disproportionate amount of CPU time. Patches 4.1.2, 3.26.2 Workarounds py Fail fast def loadmanyschema, data, kwargs: if not isinstancedata, list: raise ValidationError'Invalid...
PT-2025-52725
Name of the Vulnerable Software and Affected Versions Marshmallow versions 3.0.0rc1 through 3.26.1 Marshmallow versions 4.0.0 through 4.1.1 Description Marshmallow, a library for converting complex objects to and from simple Python datatypes, contains a flaw in the Schema.loaddata, many=True...
SUSE CVE-2017-18875
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can create arbitrary files...
SUSE CVE-2017-18877
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS attacks could occur against an OAuth 2.0 allow/deny page...
GO-2025-4187 Mattermost Server is vulnerable to Path Traversal when files are stored locally in github.com/mattermost/mattermost-server
Mattermost Server is vulnerable to Path Traversal when files are stored locally in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positi...
Fedora: Security Advisory (FEDORA-2025-074aba6ad4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress plugin Widget Options 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
WordPress Widget Options plugin <= 4.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Widget Options versions = 4.1.2...
CVE-2025-41088
Stored Cross-Site Scripting XSS in Xibo Signage's Xibo CMS v4.1.2, due to a lack of proper validation of user input. To exploit the vulnerability, the attacker must create a template in the 'Templates' section, then add a text element in the 'Global Elements' section, and finally modify the 'Text...
PT-2025-41536
Name of the Vulnerable Software and Affected Versions Xibo CMS version 4.1.2 Description A stored Cross-Site Scripting XSS issue exists due to insufficient validation of user input. An attacker can exploit this by creating a template in the 'Templates' section, adding a text element in the 'Globa...
Xibo CMS 跨站脚本漏洞
Xibo CMS is an open source content management system from Xibo Digital Signage. A cross-site scripting vulnerability exists in Xibo CMS version v4.1.2 that stems from a lack of proper validation of user input and could lead to a stored cross-site scripting attack...
EUVD-2019-1993
Malware in sbrugna...
EUVD-2014-5349
Malware in sbrugna...
EUVD-2017-9971
Malware in sbrugna...
EUVD-2011-3690
Malware in sbrugna...
EUVD-2008-1483
Malware in sbrugna...
EUVD-1999-1123
Malware in sbrugna...
EUVD-2018-10174
Malware in sbrugna...