PT-2026-95141

Name of the Vulnerable Software and Affected Versions Vvveb versions prior to 1.0.8.5 Description A flaw exists in the way user profile bios are processed. The file 'app/controller/user/profile.php' accepts the userbio field and processes it using the sanitizeHTML function in...

CVE-2026-54506: Improper Neutralization of Input During Web Page Generation

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.5, app/controller/user/profile.php accepts the userbio field and passes stored content through sanitizeHTML in system/functions.php, whose on event-handler regular expression omi...

CVE-2026-6571: Authorization Bypass Through User-Controlled Key

A weakness has been identified in kodcloud KodExplorer up to 4.52. Affected by this vulnerability is the function roleGroupAction of the file /app/controller/systemRole.class.php. Executing a manipulation of the argument grouprole can lead to authorization bypass. The attack may be launched...

CVE-2026-4830: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in kalcaddle kodbox 1.64. This issue affects the function Add of the file app/controller/explorer/userShare.class.php of the component Public Share Handler. Such manipulation leads to unrestricted upload. The attack can be executed remotely. This attack is...

CVE-2025-15175

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doAppList/appCommandAnalysis of the file src/main/java/com/sohu/cache/web/controller/AppController.java. Performing manipulation results in cross site scripting. It is possible to initiate the...

EUVD-2025-205557

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doAppList/appCommandAnalysis of the file src/main/java/com/sohu/cache/web/controller/AppController.java. Performing manipulation results in cross site scripting. It is possible to initiate the...

EUVD-2019-14916

Malware in sbrugna...

EUVD-2023-45618

Malicious code in bioql PyPI...

CVE-2025-11016: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability has been detected in kalcaddle kodbox up to 1.61.09. The affected element is the function fileOut of the file app/controller/explorer/index.class.php. Such manipulation of the argument path leads to path traversal. The attack may be performed from remote. The exploit has...

CVE-2025-10233: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability has been detected in kalcaddle kodbox 1.61. This affects the function fileGet/fileSave of the file app/controller/explorer/editor.class.php. The manipulation of the argument path leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2024-29858: Incomplete Identification of Uploaded File Variables (PHP)

In MISP before 2.4.187, uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid logo upload...

CVE-2024-29859: Unrestricted Upload of File with Dangerous Type

In MISP before 2.4.187, addmispexport in app/Controller/EventsController.php does not properly check for a valid file upload...

PT-2023-30880

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.176 Description An issue was discovered in the app/Controller/AppController.php file, where it mishandles parameter parsing. Recommendations For versions prior to 2.4.176, update to version 2.4.176 or later to resolv...

CVE-2023-48659: Undefined Security Weakness

An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing...

MISP 跨站脚本漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP version 2.4.174, which stems from the presence of...

CVE-2023-24028: Improper Access Control

In MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the decaying import function...

CVE-2015-10006: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionality of the file app/controller/insertarSliderAjax.php. The manipulation of the argument imagetitle leads to cross site scripting. The attack may be launched...

CVE-2022-29533: Improper Neutralization of Input During Web Page Generation

An issue was discovered in MISP before 2.4.158. There is XSS in app/Controller/OrganisationsController.php in a situation with a "weird single checkbox page."...

CVE-2022-26268

Xiaohuanxiong v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /app/controller/Books.php...

CVE-2022-26268: Improper Neutralization of Special Elements used in an SQL Command

Xiaohuanxiong v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /app/controller/Books.php...