5613 matches found
CVE-2025-11276 Rebuild Comment/Guestbook cross site scripting
A security flaw has been discovered in Rebuild up to 4.1.3. Affected by this issue is some unknown functionality of the component Comment/Guestbook. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 4.1.4 can resolve this...
CVE-2025-11276 Rebuild Comment/Guestbook cross site scripting
A security flaw has been discovered in Rebuild up to 4.1.3. Affected by this issue is some unknown functionality of the component Comment/Guestbook. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 4.1.4 can resolve this...
PT-2025-40785
Name of the Vulnerable Software and Affected Versions Rebuild versions up to 4.1.3 Description A security flaw exists in Rebuild’s Comment/Guestbook component, potentially allowing for cross site scripting. Remote manipulation of an unknown functionality within the component can trigger this issu...
Rebuild 代码注入漏洞
Rebuild is a highly customizable enterprise management system from getrebuild open source. A code injection vulnerability exists in Rebuild 4.1.3 and earlier versions, which stems from improper manipulation of the Comment/Guestbook component and could lead to a cross-site scripting attack...
CVE-2025-11276: Improper Neutralization of Input During Web Page Generation
A security flaw has been discovered in Rebuild up to 4.1.3. Affected by this issue is some unknown functionality of the component Comment/Guestbook. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 4.1.4 can resolve this...
CVE-2023-53536
CVE-2023-53536 affects the Linux kernel in the blk-crypto subsystem. The issue stems from blk_crypto_evict_key() sometimes returning early without unlinking the key from the keyslot management structures, while the caller proceeds to free the blk_crypto_key. This mismatch can cause a use-after-fr...
CVE-2025-10311
The Comment Info Detector plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.5. This is due to missing nonce validation on the options.php file when handling form submissions. This makes it possible for unauthenticated attackers to modify...
WordPress Comment Info Detector plugin <= 1.0.5 - Cross-Site Request Forgery to Settings Update vulnerability
Cross-Site Request Forgery to Settings Update vulnerability discovered by Nabil Irawan in WordPress Plugin Comment Info Detector versions = 1.0.5...
EUVD-2025-26041
Malicious code in bioql PyPI...
EUVD-2025-26952
Malicious code in bioql PyPI...
EUVD-2023-12365
Malicious code in bioql PyPI...
EUVD-2024-32262
Malicious code in bioql PyPI...
EUVD-2025-4063
Malicious code in bioql PyPI...
EUVD-2022-51745
Malicious code in bioql PyPI...
EUVD-2023-32496
Malicious code in bioql PyPI...
EUVD-2025-29651
Malicious code in bioql PyPI...
EUVD-2023-52386
Malicious code in bioql PyPI...
EUVD-2024-25344
Malicious code in bioql PyPI...