1030 matches found
Vert.x-Web vulnerable to Stored Cross-site Scripting in directory listings via file names
Description - In the StaticHandlerImplsendDirectoryListing... method under the text/html branch, file and directory names are directly embedded into the href, title, and link text without proper HTML escaping. - As a result, in environments where an attacker can control file names, injecting...
CVE-2025-11966
CVE-2025-11966 affects Eclipse Vert.x with directory listing enabled: when using Vert.x 4.0.0–4.5.21 and 5.0.0–5.0.4, file/directory names are inserted into generated HTML without escaping in href, title, and link attributes, enabling stored XSS. Red Hat advisory RHSA-2026:0134 notes this CVE is ...
CVE-2025-11966
In Eclipse Vert.x versions 4.0.0, 4.5.21 and 5.0.0, 5.0.4, when "directory listing" is enabled, file and directory names are inserted into generated HTML without proper escaping in the href, title, and link attributes. An attacker who can create or rename files or directories within a served path...
EUVD-1999-0863
Malware in sbrugna...
EUVD-2017-16740
Malware in sbrugna...
EUVD-2010-2543
Malware in sbrugna...
EUVD-2012-5733
Malware in sbrugna...
EUVD-2015-4734
Malware in sbrugna...
EUVD-2012-3350
Malware in sbrugna...
EUVD-2005-0712
Malware in sbrugna...
EUVD-2008-5337
Malware in sbrugna...
EUVD-2020-5843
Malware in sbrugna...
EUVD-2005-0927
Malware in sbrugna...
EUVD-2020-7879
Malware in sbrugna...
EUVD-1999-0012
Malware in sbrugna...
EUVD-2002-1478
Malware in sbrugna...
EUVD-2018-2971
Malware in sbrugna...
EUVD-2021-10359
Malware in sbrugna...