8136 matches found
EUVD-2025-33728
Publii CMS v0.46.5 build 17089 allows persistent Cross-Site Scripting XSS via unsanitized input in configuration fields such as "Site Description" and "Footer Follow Buttons". An attacker can inject arbitrary JavaScript, which is stored in the project and executed in the browsers of remote visito...
CVE-2025-61505
e107 CMS thru 2.3.3 are vulnerable to insecure deserialization in the install.php script. The script processes user-controlled input in the previoussteps POST parameter using unserializebase64decode without validation, allowing attackers to craft malicious serialized data. This could lead to remo...
Xibo CMS 跨站脚本漏洞
Xibo CMS is an open source content management system from Xibo Digital Signage. A cross-site scripting vulnerability exists in Xibo CMS version v4.1.2 that stems from a lack of proper validation of user input and could lead to a reflected cross-site scripting attack...
PT-2025-41568
Name of the Vulnerable Software and Affected Versions Publii CMS version 0.46.5 build 17089 Description Publii CMS version 0.46.5 build 17089 contains a persistent Cross-Site Scripting XSS flaw. This occurs because input in configuration fields, such as “Site Description” and “Footer Follow...
CVE-2025-60838
MCMS v6.0.1 has an arbitrary file upload vulnerability (CVE-2025-60838) that could allow an attacker to execute arbitrary code by uploading a crafted file. This vulnerability is consistently described across multiple sources (NVD, Red Hat, ENISA EUVD, CVE List, CNNVD, etc.). The available documen...
PT-2025-41591
Name of the Vulnerable Software and Affected Versions e107 CMS versions through 2.3.3 Description The software contains a flaw due to insecure deserialization in the install.php script. The script processes user-controlled input received in the previous steps POST parameter using unserializebase6...
Code-Projects Online Complaint Site SQL注入漏洞
Online Complaint Site is an online complaint site. Online Complaint Site suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter Username in file /cms/users/index.php. An attacker can exploit this vulnerability...
Melis Platform CMS Unauthenticated File Upload Leading to RCE
File upload leading to remote code execution RCE in the “melis-cms-slider” module of Melis Technology's Melis Platform. This vulnerability allows an attacker to upload a malicious file via a POST request to '/melis/MelisCmsSlider/MelisCmsSliderDetails/saveDetailsForm' using the 'mcsdetailimg'...
EUVD-2021-1477
Malware in sbrugna...
EUVD-2007-0097
Malware in sbrugna...
EUVD-2006-6093
Malware in sbrugna...
EUVD-2012-5279
Malware in sbrugna...
EUVD-2010-4966
Malware in sbrugna...
EUVD-2007-2101
Malware in sbrugna...
EUVD-2018-10647
Malware in sbrugna...
EUVD-2016-2510
Malware in sbrugna...
EUVD-2021-2442
Malware in sbrugna...
EUVD-2010-1273
Malware in sbrugna...