Lucene search
+L

9286 matches found

Positive Technologies
Positive Technologies
added 2025/08/07 12:00 a.m.11 views

PT-2025-32268 · Unknown · Agora Foundation

Name of the Vulnerable Software and Affected Versions: Agora Foundation versions prior to b087490 Description: The software is susceptible to a cross-site scripting XSS issue due to a vulnerability in how tags are handled. This flaw is located in the client/agora/public/js/editorManager.js file...

6.4CVSS5.4AI score0.00234EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2025/08/07 12:00 a.m.14 views

CVE-2025-55133

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client/agora/public/js/editorManager.js...

6.4CVSS0.00234EPSS
SaveExploits0References3
OSV
OSV
added 2025/08/07 12:00 a.m.7 views

CVE-2025-55133

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client/agora/public/js/editorManager.js...

6.4CVSS5.3AI score
SaveExploits0References5
CNNVD
CNNVD
added 2025/08/07 12:00 a.m.6 views

agora 代码问题漏洞

agora is a cloud-based learning and research platform open-sourced by the Agora Foundation. A code issue vulnerability exists in versions prior to agora fall23-Alpha1 690ce56, which stems from a user controller allowing non-standard image formats leading to cross-site scripting attacks...

6.4CVSS6.2AI score0.00242EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/08/07 12:00 a.m.5 views

CVE-2025-55134

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora/public/js/editorManager.js...

6.4CVSS5.5AI score0.00234EPSS
SaveExploits0References3
CVE
CVE
added 2025/08/07 12:00 a.m.23 views

CVE-2025-55133

CVE-2025-55133 affects Agora Foundation Agora fall23-Alpha1 prior to build b087490 , with a cross-site scripting (XSS) flaw exposed via the topicName parameter in client/agora/public/js/editorManager.js . The underlying issue is improper handling of topicName leading to script injection. The CVSS...

6.4CVSS5.7AI score0.00234EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/08/07 12:00 a.m.2 views

CVE-2025-55133

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via topicName in client/agora/public/js/editorManager.js...

6.4CVSS5.6AI score0.00234EPSS
SaveExploits0References3
CVE
CVE
added 2025/08/07 12:00 a.m.26 views

CVE-2025-55135

CVE-2025-55135 affects Agora Foundation Agora fall23-Alpha1 prior to patch 690ce56. The issue stems from insufficient file type validation in server/routes/userRoutes.js, allowing non-supported formats (including SVG) for profile pictures and enabling XSS via server/controller/userController.js. ...

6.4CVSS5.6AI score0.00242EPSS
SaveExploits0References4
CVE
CVE
added 2025/08/07 12:00 a.m.21 views

CVE-2025-55134

Affected software: Agora Foundation fall23-Alpha1 (pre-b087490). The vulnerability is a client-side cross-site scripting (XSS) in editorManager.js caused by improper handling of the tag parameter. Impact is XSS exposure via that field; no exploitation details are provided beyond this. Mitigation:...

6.4CVSS5.7AI score0.00234EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/08/07 12:00 a.m.18 views

CVE-2025-55135

In Agora Foundation Agora fall23-Alpha1 before 690ce56, there is XSS via a profile picture to server/controller/userController.js. Formats other than PNG, JPEG, and WEBP are permitted by server/routes/userRoutes.js; this includes SVG...

6.4CVSS0.00242EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/08/07 12:00 a.m.15 views

CVE-2025-55134

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora/public/js/editorManager.js...

6.4CVSS0.00234EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/07 12:00 a.m.13 views

PT-2025-32269 · Unknown · Agora Foundation

Name of the Vulnerable Software and Affected Versions: Agora Foundation Agora fall23-Alpha1 versions prior to 690ce56 Description: The application permits file formats other than PNG, JPEG, and WEBP for profile pictures, including SVG. This allows for cross-site scripting XSS via a crafted profil...

6.4CVSS5.8AI score0.00242EPSS
SaveExploits0References8
OSV
OSV
added 2025/08/07 12:00 a.m.9 views

CVE-2025-55134

In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora/public/js/editorManager.js...

6.4CVSS5.3AI score
SaveExploits0References5
GithubExploit
GithubExploit
added 2025/08/02 4:01 p.m.361 views

Exploit for File Descriptor Leak in Linuxfoundation Runc

CVE-2024-21626 Root cuase & Proof of cause How to use p...

8.6CVSS7.3AI score0.18087EPSS
SaveExploits18
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/31 7:13 p.m.6 views

Malicious code in aistac-foundation (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2025/07/31 7:13 p.m.9 views

MAL-2025-6429 Malicious code in aistac-foundation (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2025/07/29 8:09 a.m.9 views

firefox: thunderbird: Incorrect JavaScript state machine for generators

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The JavaScript engine did not handle closed generators correctly, and it was possible to resume them, resulting in a nullptr dereference...

6.5CVSS7.3AI score0.00351EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2025/07/28 5:56 a.m.6 views

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.18 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.18 security, enhancement & bug fix update...

7.5CVSS6.7AI score0.00838EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2025/07/28 4:53 a.m.9 views

Moderate: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.19 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.19 security, enhancement & bug fix update...

7.5CVSS6.9AI score0.01816EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/07/25 12:00 a.m.11 views

编号撤回

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

7.1AI score
SaveExploits0References7
Rows per page
Query Builder