5039 matches found
CVE-2025-11276
CVE-2025-11276 affects Rebuild up to 4.1.3, with the Comment/Guestbook component vulnerable to cross-site scripting via remote manipulation. Upgrade to 4.1.4 to fix. Public exploitation status is not detailed in the provided documents; multiple sources note vendor confirmation in private communic...
CVE-2025-11276 Rebuild Comment/Guestbook cross site scripting
A security flaw has been discovered in Rebuild up to 4.1.3. Affected by this issue is some unknown functionality of the component Comment/Guestbook. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 4.1.4 can resolve this...
CVE-2025-11276: Improper Neutralization of Input During Web Page Generation
A security flaw has been discovered in Rebuild up to 4.1.3. Affected by this issue is some unknown functionality of the component Comment/Guestbook. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 4.1.4 can resolve this...
Rebuild 代码注入漏洞
Rebuild is a highly customizable enterprise management system from getrebuild open source. A code injection vulnerability exists in Rebuild 4.1.3 and earlier versions, which stems from improper manipulation of the Comment/Guestbook component and could lead to a cross-site scripting attack...
PT-2025-40785
Name of the Vulnerable Software and Affected Versions Rebuild versions up to 4.1.3 Description A security flaw exists in Rebuild’s Comment/Guestbook component, potentially allowing for cross site scripting. Remote manipulation of an unknown functionality within the component can trigger this issu...
CVE-2023-53536
CVE-2023-53536 affects the Linux kernel in the blk-crypto subsystem. The issue stems from blk_crypto_evict_key() sometimes returning early without unlinking the key from the keyslot management structures, while the caller proceeds to free the blk_crypto_key. This mismatch can cause a use-after-fr...
CVE-2025-10311
The Comment Info Detector plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.5. This is due to missing nonce validation on the options.php file when handling form submissions. This makes it possible for unauthenticated attackers to modify...
WordPress Comment Info Detector plugin <= 1.0.5 - Cross-Site Request Forgery to Settings Update vulnerability
Cross-Site Request Forgery to Settings Update vulnerability discovered by Nabil Irawan in WordPress Plugin Comment Info Detector versions = 1.0.5...
EUVD-2023-34368
Malicious code in bioql PyPI...
EUVD-2023-48506
Malicious code in bioql PyPI...
EUVD-2022-2439
Malicious code in bioql PyPI...
EUVD-2022-53141
Malicious code in bioql PyPI...
EUVD-2023-52386
Malicious code in bioql PyPI...
EUVD-2022-42454
Malicious code in bioql PyPI...
EUVD-2025-26014
Malicious code in bioql PyPI...
EUVD-2024-0599
Malicious code in bioql PyPI...
EUVD-2022-51745
Malicious code in bioql PyPI...
EUVD-2022-0751
Malicious code in bioql PyPI...