39410 matches found
CVE-2025-41026 Multiple vulnerabilities in GDTaller
Reflected Cross Site Scripting XSS vulnerabilities in GDTaller. These vulnerabilities allows an attacker execute JavaScript code in the victim's browser by sending a malicious URL in 'site' parameter in 'applogin.php'...
CVE-2025-41026
CVE-2025-41026: Reflected XSS in GDTaller. Vulnerability arises from handling the site parameter in app_login.php, allowing an attacker to cause JavaScript execution in the victim’s browser via a malicious URL. Documents indicate this is a reflected XSS with CVSS v4.0 base score 5.1 (Medium); no ...
EUVD-2026-16100
The FormLift for Infusionsoft Web Forms plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 7.5.21. This is due to missing capability checks on the connect and listenfortokens methods of the FormLiftInfusionsoftManager class, both of which are hooked ...
PT-2026-30537
Summary Google Chat app-url webhook verification accepted add-on principals outside the intended deployment binding. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.3.22 - Latest released tag checked: v2026.3.23-2 630f1479c44f78484dfa21bb407cbe6f171dac87 - Latest published...
CVE-2026-4830: Unrestricted Upload of File with Dangerous Type
A vulnerability was identified in kalcaddle kodbox 1.64. This issue affects the function Add of the file app/controller/explorer/userShare.class.php of the component Public Share Handler. Such manipulation leads to unrestricted upload. The attack can be executed remotely. This attack is...
PT-2026-28283
Name of the Vulnerable Software and Affected Versions GDTaller affected versions not specified Description Reflected Cross Site Scripting XSS issues exist in GDTaller. These issues allow an attacker to execute JavaScript code in a victim's browser by sending a malicious URL containing crafted...
GDTaller Cross-Site Scripting Vulnerabilities
GDTaller is a digital certificate and electronic seal management system developed by the Spanish company GDTaller. GDTaller has a cross-site scripting vulnerability, which stems from the site parameter in the applogin.php file. Attackers can send victims a URL containing malicious scripts, causin...
GDTaller Cross-Site Scripting Vulnerabilities
GDTaller is a digital certificate and electronic seal management system developed by the Spanish company GDTaller. GDTaller has a cross-site scripting vulnerability, which originates from the site parameter in the apprecuperarclave.php file. This vulnerability could allow attackers to execute...
io.github.microcks:microcks-app (>=1.11.0, <=1.12.1), io.telicent.smart-caches:cli-debug (>=0.22.0, <=0.36.2) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.33.6)
io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.33.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.github.microcks:microcks-app =1.11.0, =0.22.0, =0.36.2...
io.github.microcks:microcks-app (>=1.9.0, <=1.10.1-fix-1), io.telicent.smart-caches.graph:docker (0.80.1) +1 more potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.32.0)
io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - io.github.microcks:microcks-app =1.9.0, =1.10.1-fix-1 -...
com.sap.hcp.cf.logging:sample-app-spring-boot (>=3.8.0, <=4.0.0-rc1) potentially affected by CVE-2026-33701 via io.opentelemetry.javaagent:opentelemetry-javaagent (1.31.0)
io.opentelemetry.javaagent:opentelemetry-javaagent MAVEN version 1.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry.javaagent:opentelemetry-javaagent and may be impacted: - com.sap.hcp.cf.logging:sample-app-spring-boot =3.8.0,...
Cross-site Request Forgery (CSRF)
Overview github.com/mattermost/mattermost/server/channels/app is a private-cloud Slack alternative Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the UpdateAccessControlPolicyActiveStatus endpoint. An attacker can change the active status of access control...
Improper Check for Unusual or Exceptional Conditions
Overview github.com/mattermost/mattermost/server/channels/app is a private-cloud Slack alternative Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions through the rendering process of external SVGs on link embeds. An attacker can cause the web...
EUVD-2026-15485
Mattermost versions 11.4.x = 11.4.0, 11.3.x = 11.3.1, 11.2.x = 11.2.3, 10.11.x = 10.11.11 fail to prevent rendering of external SVGs on link embeds which allows unauthenticated users to crash the Mattermost webapp and desktop app via creating an issue or PR on GitHub.. Mattermost Advisory ID:...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 RSC lab intentionally vulnerable Local Doc...
CVE-2026-20719
Mattermost versions 11.4.x = 11.4.0, 11.3.x = 11.3.1, 11.2.x = 11.2.3, 10.11.x = 10.11.11 fail to prevent rendering of external SVGs on link embeds which allows unauthenticated users to crash the Mattermost webapp and desktop app via creating an issue or PR on GitHub.. Mattermost Advisory ID:...
CVE-2026-23924
creationtimestamp| type| source ---|---|--- 2026-03-25 14:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhvcqd54ze2r...
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service (CVE-2026-32874, CVE-2026-32875)
Summary Python module UltraJSON is used by IBM App Connect Enterprise Certified Container by the mapping assistance component. IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service. This bulletin provides patch...
CVE-2026-2343
creationtimestamp| type| source ---|---|--- 2026-03-25 07:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116288640066659181 2026-03-25 07:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhukz3ljse2i 2026-03-25 10:05:16+00:00| seen|...