310 matches found
EUVD-2025-200242
Calibre-Web Has a Stored Cross-Site Scripting XSS Vulnerability via the 'username' Field During User Creation...
CVE-2025-65858
A Stored Cross-Site Scripting XSS vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username' field during user creation. The payload is stored unsanitized and later executed when the /ajax/listusers endpoint is accessed...
CVE-2025-65858: Improper Neutralization of Input During Web Page Generation
A Stored Cross-Site Scripting XSS vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username' field during user creation. The payload is stored unsanitized and later executed when the /ajax/listusers endpoint is accessed...
CVE-2025-65858
A Stored Cross-Site Scripting XSS vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username' field during user creation. The payload is stored unsanitized and later executed when the /ajax/listusers endpoint is accessed...
CVE-2025-65858
Calibre-Web v0.6.25 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. The issue occurs because the application fails to sanitize the 'username' field during the user creation process. An attacker can inject malicious JavaScript which is stored in the database and subsequently e...
CVE-2025-65858
A Stored Cross-Site Scripting XSS vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username' field during user creation. The payload is stored unsanitized and later executed when the /ajax/listusers endpoint is accessed...
CVE-2025-65858
A Stored Cross-Site Scripting XSS vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username' field during user creation. The payload is stored unsanitized and later executed when the /ajax/listusers endpoint is accessed...
Calibre-Web 安全漏洞
Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database by Jan B Individual Developer. A security vulnerability exists in Calibre-Web version v0.6.25, which stems from malicious JavaScript not being filtered in the username field during user creatio...
EUVD-2021-12803
Malware in sbrugna...
EUVD-2020-4928
Malware in sbrugna...
EUVD-2021-12804
Malware in sbrugna...
EUVD-2025-22546
Malicious code in bioql PyPI...
EUVD-2025-22540
Malicious code in bioql PyPI...
EUVD-2022-15958
Malicious code in bioql PyPI...
EUVD-2022-0745
Malicious code in bioql PyPI...
EUVD-2022-1437
Malicious code in bioql PyPI...
EUVD-2024-3244
Malicious code in bioql PyPI...
EUVD-2023-1352
Malicious code in bioql PyPI...