6997 matches found
CVE-2025-39395: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mojoomla WPAMS apartment-management allows SQL Injection.This issue affects WPAMS: from n/a through = 44.0 17-08-2023...
The vulnerability of the AngularJS JavaScript framework for developing single-page applications relates to incomplete filtering of special elements, allowing attackers to perform cross-site scripting attacks.
The vulnerability of the AngularJS JavaScript framework for developing single-page applications is related to incomplete filtering of special elements. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...
CVE-2025-48137
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in proxymis Interview allows SQL Injection. This issue affects Interview: from n/a through 1.01...
Malware in ui-platform-business-elements
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in ui-platform-elements
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
WordPress plugin Sticky HTML5 Music Player SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
The vulnerability of the Microsoft Visual Studio software lies in its lack of measures to neutralize special elements used in the operating system command line, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Visual Studio software lies in the lack of measures taken to neutralize special elements used in the operating system command line. Exploiting this vulnerability allows an attacker to execute arbitrary code...
CVE-2025-46786 Zoom Workplace Apps - Cross-site Scripting
Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network access...
Triple-Identity Authentication: the Future of Secure Access
In a typical authentication process, the local system verifies the user's identity using a stored hash value generated by a cross-system hash algorithm. This article shifts the research focus from traditional password encryption to the establishment of gatekeeping mechanisms for effective...
kernel: wifi: rtw89: avoid reading out of bounds when loading TX power FW elements
A flaw was found in the Linux kernel's wifi: rtw89 component. A local attacker with low privileges could exploit an out-of-bounds read vulnerability when loading TX power firmware elements. This flaw, caused by a loop reading beyond a valid memory region, may lead to information disclosure or...
Tenda FH451 安全漏洞
The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 suffers from a code execution vulnerability that stems from the formSafeEmailFilter function failing to properly filter special elements of the constructed snippet. No details of the vulnerability are available at this ti...
CVE-2025-47528
Missing Authorization vulnerability in pewilliams Ovation Elements ovation-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ovation Elements: from n/a through = 1.1.2...
Content Spoofing
AngularJS is vulnerable to Content Spoofing. The vulnerability is due to improper sanitization of the 'href' and 'xlink:href' attributes in SVG elements, which allows attackers to bypass image source restrictions...
CVE-2025-47659
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in voidcoders WPBakery Visual Composer WHMCS Elements void-visual-whmcs-element allows Stored XSS.This issue affects WPBakery Visual Composer WHMCS Elements: from n/a through = 1.0.4.3...
CVE-2025-47528
Missing Authorization vulnerability in pewilliams Ovation Elements ovation-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ovation Elements: from n/a through = 1.1.2...
CVE-2025-47659 WordPress WPBakery Visual Composer WHMCS Elements <= 1.0.4.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in voidcoders WPBakery Visual Composer WHMCS Elements allows Stored XSS. This issue affects WPBakery Visual Composer WHMCS Elements: from n/a through 1.0.4.1...
CVE-2025-47659 WordPress WPBakery Visual Composer WHMCS Elements plugin <= 1.0.4.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in voidcoders WPBakery Visual Composer WHMCS Elements void-visual-whmcs-element allows Stored XSS.This issue affects WPBakery Visual Composer WHMCS Elements: from n/a through = 1.0.4.3...
CVE-2025-47659
CVE-2025-47659 corresponds to a stored XSS in WPBakery Visual Composer WHMCS Elements due to improper input neutralization during web page generation. Affected product: WPBakery Visual Composer WHMCS Elements, versions up to 1.0.4.1 (per CVE description). Base metrics indicate a Medium severity (...
CVE-2025-47528 WordPress Ovation Elements plugin <= 1.1.2 - Broken Access Control Vulnerability
Missing Authorization vulnerability in pewilliams Ovation Elements ovation-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ovation Elements: from n/a through = 1.1.2...
CVE-2025-47528
CVE-2025-47528 affects Ovation Elements (WordPress plugin) with versions <= 1.1.2. The issue is a Missing Authorization (broken access control) vulnerability that could allow access level misconfigurations. CVSSv3.1 base score is 4.3 (Medium). Connected sources indicate Ovation Elements