CVE-2025-64752: Server-Side Request Forgery (SSRF)

grist-core is a spreadsheet hosting server. Prior to version 1.7.7, a user with access to any document on a Grist installation can use a feature for fetching from a URL that is executed on the server. The privileged network access of server-side requests could offer opportunities for attack...

EUVD-2025-7824

Malicious code in bioql PyPI...

CVE-2025-27924

Nintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the "Navigate to a URL" action...

CVE-2025-27924: Improper Neutralization of Input During Web Page Generation

Nintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the "Navigate to a URL" action...

PT-2025-10643

Name of the Vulnerable Software and Affected Versions Nintex Automation versions 5.6 through 5.7 Description The issue is related to a stored XSS problem associated with the Navigate to a URL action. Recommendations For Nintex Automation versions 5.6 through 5.7, update to version 5.8 or later to...

CVE-2024-26269

Cross-site scripting XSS vulnerability in the Frontend JS module's portlet.js in Liferay Portal 7.2.0 through 7.4.3.37, and Liferay DXP 7.4 before update 38, 7.3 before update 11, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML...

CVE-2024-26269: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Frontend JS module's portlet.js in Liferay Portal 7.2.0 through 7.4.3.37, and Liferay DXP 7.4 before update 38, 7.3 before update 11, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML...

PT-2023-32934

Name of the Vulnerable Software and Affected Versions S-CMS versions 2.0 build20220529 through 2.0 build20231006 Description A critical issue has been found in S-CMS, affecting some unknown functionality of the file /member/ad.php?action=ad. The manipulation of the arguments A text, A url, and A...

F5 Networks BIG-IP : cURL vulnerability (SOL15875)

The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL. CVE-2013-1944 C Tenable Network Security, Inc. The descriptive text and...

PT-2013-5288

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.1.10 Moodle versions 2.2.x before 2.2.11 Moodle versions 2.3.x before 2.3.8 Moodle versions 2.4.x before 2.4.5 Moodle versions 2.5.x before 2.5.1 Yahoo! YUI version 3.10.2 Description A cross-site scripting XSS issue...