1054 matches found
CVE-2025-61261
A reflected cross-site scripting XSS vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload...
GHSA-2374-6CVW-QMX6 DNN CKEditor Provider allows unauthenticated upload out-of-the-box
Summary The out-of-box experience for HTML editing allows unauthenticated users to upload files. This opens a potential vector to other security issues and is not needed on most implementations. Details The new out-of-box experience blocks that endpoint to unauthenticated users. If there is a rea...
DNN CKEditor Provider allows unauthenticated upload out-of-the-box
Summary The out-of-box experience for HTML editing allows unauthenticated users to upload files. This opens a potential vector to other security issues and is not needed on most implementations. Details The new out-of-box experience blocks that endpoint to unauthenticated users. If there is a rea...
Insecure Default Initialization of Resource
Overview DotNetNuke.Core is a references provider to the DotNetNuke.dll to develop extensions for the DNN Platform. Affected versions of this package are vulnerable to Insecure Default Initialization of Resource via the CKEditor Provider. An attacker can upload unauthorized files by accessing the...
CVE-2025-62802 DNN CKEditor Provider allows unauthenticated upload out-of-the-box
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to 10.1.1, the out-of-box experience for HTML editing allows unauthenticated users to upload files. This opens a potential vector to other security issues and is not needed on most...
CVE-2025-62802 DNN CKEditor Provider allows unauthenticated upload out-of-the-box
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to 10.1.1, the out-of-box experience for HTML editing allows unauthenticated users to upload files. This opens a potential vector to other security issues and is not needed on most...
CVE-2025-62802
CVE-2025-62802 affects the DNN (DotNetNuke) CKEditor Provider. Prior to version 10.1.1, the out-of-the-box HTML editing experience allows unauthenticated users to upload files, creating a potential vector for further security issues. The vulnerability is fixed in 10.1.1. Affected material indicat...
CVE-2025-62802 DNN CKEditor Provider allows unauthenticated upload out-of-the-box
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to 10.1.1, the out-of-box experience for HTML editing allows unauthenticated users to upload files. This opens a potential vector to other security issues and is not needed on most...
EUVD-2014-5089
Malware in sbrugna...
EUVD-2021-0749
Malware in sbrugna...
EUVD-2012-2072
Malware in sbrugna...
EUVD-2018-0193
Malware in sbrugna...
EUVD-2020-23976
Malware in sbrugna...
EUVD-2021-2267
Malware in sbrugna...
EUVD-2020-23920
Malware in sbrugna...
EUVD-2021-1795
Malware in sbrugna...
EUVD-2021-0505
Malware in sbrugna...
EUVD-2021-2315
Malware in sbrugna...