9302 matches found
EUVD-2025-37174
Malicious code in epic-blog-frontend npm...
MAL-2025-49164 Malicious code in epic-minimalist-blog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88594dc7418cc4928defaac06863881868aeaf3e78f9d9037cfd68bba955edee The package epic-minimalist-blog was found to contain malicious code...
EUVD-2025-37011
Cross-site scripting XSS vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter...
CVE-2025-50574
Cross-site scripting XSS vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter...
CVE-2025-50574
Cross-site scripting XSS vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter...
Aembit Introduces Identity and Access Management for Agentic AI
Silver Spring, USA/ Maryland, 30th October 2025, CyberNewsWire...
CVE-2025-58711
Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blog Designer PRO: from n/a through = 3.4.8...
CVE-2025-50574
Cross-site scripting XSS vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter...
PT-2025-44408
Name of the Vulnerable Software and Affected Versions Glamour Salon Management System version 1 Description A cross-site scripting XSS issue exists in the blog-details.php component. This allows remote attackers to inject arbitrary web script or HTML through the blog comment section parameter. Th...
CVE-2025-50574
A cross-site scripting (XSS) vulnerability exists in the blog-details.php component of Hiruna Gallage's Glamour Salon Management System v1 . The flaw is caused by the failure to correctly filter input for the blog comment section parameter , allowing remote attackers to inject arbitrary web scrip...
Glamour Salon Management System security vulnerabilities
Glamour Salon Management System is a salon management system by the individual developer Hiruna Gallage. A security vulnerability exists in Glamour Salon Management System v1, which stems from the blog comment section parameter in blog-details.php not being filtered correctly, which could lead to...
CVE-2025-50574
Cross-site scripting XSS vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter...
CVE-2025-50574: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter...
Sweet Security Brings Runtime-CNAPP Power to Windows
Tel Aviv, Israel, 29th October 2025, CyberNewsWire...
EUVD-2025-36633
Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blog Designer PRO: from n/a through = 3.4.8...
CVE-2025-58711
Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blog Designer PRO: from n/a through = 3.4.8...
CVE-2025-58711 WordPress Blog Designer PRO plugin <= 3.4.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blog Designer PRO: from n/a through = 3.4.8...
CVE-2025-58711 WordPress Blog Designer PRO plugin <= 3.4.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blog Designer PRO: from n/a through = 3.4.8...
CVE-2025-58711
CVE-2025-58711 affects the WordPress Blog Designer PRO plugin up to version 3.4.8. The root cause is missing authorization checking, allowing access to functionality not properly constrained by ACLs. Impact is unauthorized access to constrained features; exploitation status is not provided in the...