10959 matches found
DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed
DNN.PLATFORM allows a specially crafted request can inject scripts in the Activity Feed Attachments endpoint which will then render in the feed, resulting in a cross-site scripting attack. This vulnerability is fixed in 10.0.1...
GHSA-WWC9-WMM3-2PMF DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed
DNN.PLATFORM allows a specially crafted request can inject scripts in the Activity Feed Attachments endpoint which will then render in the feed, resulting in a cross-site scripting attack. This vulnerability is fixed in 10.0.1...
CVE-2025-38083
creationtimestamp| type| source ---|---|--- 2025-06-20 11:46:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18933 2025-07-30 17:02:49+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lv73zcnzx327 2025-07-30 17:03:19+00:00| seen|...
CVE-2025-4981
creationtimestamp| type| source ---|---|--- 2025-06-20 10:44:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18927 2025-06-20 12:15:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114715637785288887 2025-06-20 13:23:39+00:00| seen|...
CVE-2025-6322
creationtimestamp| type| source ---|---|--- 2025-06-20 09:41:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18922 2025-06-20 10:01:43+00:00| published-proof-of-concept| Telegram/p4cwm2yjSN4ovrDbIKK0UGlBzlMUWXB5O0q8DxAqqucQZuA 2025-06-20 10:36:31+00:00| seen|...
Dotnetnuke < 10.0.1 Stored Cross-Site Scripting (XSS) in Activity Feed (GHSA-wwc9-wmm3-2pmf)
According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.0.1. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
Dotnetnuke < 10.0.1 Stored Cross-Site Scripting (XSS) in Activity Feed (CVE-2025-52485)
According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.0.1. It is, therefore, affected by a vulnerability. - DNN.PLATFORM Allows Stored Cross-Site Scripting XSS in Activity Feed CVE-2025-52485 Note that Nessus has not tested for this iss...
VReaves: Eavesdropping on Virtual Reality App Identity and Activity Via Electromagnetic Side Channels
Virtual reality VR has recently proliferated significantly, consisting of headsets or head-mounted displays HMDs and hand controllers for an embodied and immersive experience. The VR device is usually embedded with different kinds of IoT sensors, such as cameras, microphones, communication sensor...
Malicious code in nifi-frontend (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in wonderland-api-security-plugin (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5483 Malicious code in wonderland-api-security-plugin (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in web_for_ntu_flag2 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in mr456 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5438 Malicious code in mr456 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5408 Malicious code in fooobar (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in ecs-api-reference (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in alexmssd (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5352 Malicious code in @unkn0wnartist/h1-poc-test (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0e64d1dfdc7c6bafca9393b3ee87b5751283b6d3c2149f5f69e8579a500cda3 Any computer that has this package installed or running should be considered...