CVE-2025-60859

Cross Site Scripting XSS vulnerability in Gnuboard 5.6.15 allows authenticated attackers to execute arbitrary code via crafted cid parameter in bbs/viewcomment.php...

EUVD-2012-3996

Malware in sbrugna...

EUVD-2011-5085

Malware in sbrugna...

EUVD-2007-1985

Malware in sbrugna...

EUVD-2018-17142

Malware in sbrugna...

EUVD-2022-33731

Malicious code in bioql PyPI...

EUVD-2022-33732

Malicious code in bioql PyPI...

EUVD-2022-33736

Malicious code in bioql PyPI...

EUVD-2022-33735

Malicious code in bioql PyPI...

EUVD-2023-40199

Malicious code in bioql PyPI...

EUVD-2022-33730

Malicious code in bioql PyPI...

EUVD-2022-37149

Malicious code in bioql PyPI...

TOTOLINK A3100R DoS

The vulnerability of the setIpPortFilterRules function in TOTOLINK A3100R router microprogramming software is related to buffer overflows in the stack when processing the comment parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially...

TOTOLINK A3100R DoS

The vulnerability of the setIpPortFilterRules function in TOTOLINK A3100R router microprogramming software is related to buffer overflows in the stack when processing the comment parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially...

CVE-2025-53926 Emlog has Stored Cross-site Scripting vulnerability due to error

Emlog is an open source website building system. A cross-site scripting XSS vulnerability in emlog up to and including pro-2.5.17 allows remote attackers to inject arbitrary web script or HTML via the comment and comname parameters. Reflected XSS requires the victim to send POST requests, therefo...

emlog cross-site scripting vulnerability

emlog is emlog open source a PHP and MySQL based CMS website builder. A cross-site scripting vulnerability exists in emlog pro-2.5.17 and earlier versions, which stems from insufficient cleanup of the comment and comname parameters and could lead to a remote attacker injecting reflective cross-si...

CVE-2025-6302

A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. Affected is the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Comment leads to stack-based buffer overflow. It is possible to launch the attack...

TOTOLINK A3002RU Firewall XSS

The vulnerability of the IP/Port Filtering configuration of the Firewall module in TOTOLINK A3002RU microprogrammed router software is related to the lack of protection for the website structure when processing the Comment parameter. Exploiting this vulnerability allows a remote attacker to perfo...

TOTOLINK A3002RU MAC Filtering XSS

The vulnerability of the MAC filtering configuration in the TOTOLINK A3002RU router’s microprogrammed software firewall module is related to the lack of protection for the website structure when processing the “Comment” parameter. Exploiting this vulnerability allows a remote attacker to perform...

TOTOLINK A3002RU NAT Mapping XSS

The vulnerability of the NAT Mapping module in TOTOLINK A3002RU router microprogramming software is related to the lack of measures taken to protect the website structure when processing the Comment parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting...