CVE-2025-61681

KUNO CMS is a fully deployable full-stack blog application. Versions 1.3.13 and below contain validation flaws in its file upload functionality that can be exploited for stored XSS. The upload endpoint only validates file types based on Content-Type headers, lacks file content analysis and...

UBUNTU-CVE-2020-15562

An issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before 1.4.7. It allows XSS via a crafted HTML e-mail message, as demonstrated by a JavaScript payload in the xmlns aka XML namespace attribute of a HEAD element when an SVG element exists...

PT-2014-2160 · Libnet6 · Libnet6

Name of the Vulnerable Software and Affected Versions: libnet6 versions prior to 1.3.14 Description: The issue is related to an integer overflow in the inc/server.hpp file of libnet6. This could potentially allow remote attackers to hijack connections and gain privileges as other users by making ...