EUVD-2025-48256

Malicious code in continuingptarmiganz3n npm...

CVE-2023-48256

The vulnerability allows a remote attacker to inject arbitrary HTTP response headers or manipulate HTTP response bodies inside a victim’s session via a crafted URL or HTTP request...

CVE-2025-48256

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xylus Themes Import Social Events import-facebook-events allows Stored XSS.This issue affects Import Social Events: from n/a through = 1.8.5...

CVE-2025-48256 WordPress Import Social Events <= 1.8.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xylus Themes Import Social Events allows Stored XSS. This issue affects Import Social Events: from n/a through 1.8.5...

CVE-2025-48256

CVE-2025-48256 covers a Stored XSS in the WordPress plugin Import Social Events (versions ≤ 1.8.5) by Xylus Themes. The issue stems from improper input neutralization during web page generation, enabling an attacker-supplied payload to be stored and later executed in a victim’s browser. The vulne...

CVE-2025-48256 WordPress Import Social Events plugin <= 1.8.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xylus Themes Import Social Events import-facebook-events allows Stored XSS.This issue affects Import Social Events: from n/a through = 1.8.5...

CVE-2023-48256

creationtimestamp| type| source ---|---|--- 2024-01-10 14:31:38+00:00| seen| https://t.me/ctinow/165810 2024-01-28 12:26:30+00:00| seen| https://t.me/ctinow/174918...

CVE-2023-48256

The CVE-2023-48256 entry concerns Bosch Nexo Cordless Nutrunner and related components. The root cause is insufficient handling of CRLF sequences in HTTP headers, which allows a remote attacker to inject arbitrary HTTP response headers or manipulate the HTTP response body within a victim’s sessio...

CVE-2022-48256

creationtimestamp| type| source ---|---|--- 2023-01-13 07:31:06+00:00| seen| https://t.me/cibsecurity/56477 2025-04-07 15:45:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10717...

CVE-2022-48256

Summary: CVE-2022-48256 affects Technitium DNS Server versions prior to 10.0. A self-CNAME loop in the DNS response can cause the answer to contain hundreds of records, leading to a denial of service (availability impact). The issue is triggered by the CNAME handling logic and results in resource...