33 matches found
CVE-2024-41475
Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration...
EUVD-2025-21881
Malicious code in bioql PyPI...
CVE-2025-7786 Gnuboard g6 Post Reply qa cross site scripting
A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrappopinupdate/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated...
CVE-2025-7786 Gnuboard g6 Post Reply qa cross site scripting
A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrappopinupdate/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated...
CVE-2025-7786
CVE-2025-7786 affects Gnuboard g6 up to version 6.0.10. The issue is a cross-site scripting vulnerability in the Post Reply Handler, triggered by processing the file path /bbs/scrap_popin_update/qa/. The attack can be carried out remotely and the exploit has been disclosed publicly. Connected sou...
CVE-2025-7786 Gnuboard g6 Post Reply qa cross site scripting
A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrappopinupdate/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated...
PT-2025-30039 · Unknown · Gnuboard G6
Name of the Vulnerable Software and Affected Versions: Gnuboard g6 versions up to 6.0.10 Description: A problematic issue has been identified in Gnuboard g6. The issue affects processing of the /bbs/scrap popin update/qa/ file within the Post Reply Handler component, leading to cross site...
CVE-2025-7786: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrappopinupdate/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated...
CVE-2024-24156
Cross Site Scripting XSS vulnerability in Gnuboard g6 before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5, allows remote attackers execute arbitrary code via the wrcontent parameter...
CVE-2024-24157
Gnuboard g6 / https://github.com/gnuboard/g6 commit c2cc1f5069e00491ea48618d957332d90f6d40e4 is vulnerable to Cross Site Scripting XSS via board.py...
CVE-2024-41475
Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration...
CVE-2024-41475
Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration...
CVE-2024-41475
Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration...
CVE-2024-41475
Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration...
CVE-2024-41475
Gnuboard g6 version 6.0.7 is vulnerable to session hijacking due to a CORS misconfiguration (origin validation error). This flaw allows for unauthorized access to user sessions. To remediate the issue, users should update the CORS configuration to properly restrict access. As a temporary workarou...
CVE-2024-41475: Origin Validation Error
Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration...
CVE-2024-41475
Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration...
CVE-2024-24157
Gnuboard g6 / https://github.com/gnuboard/g6 commit c2cc1f5069e00491ea48618d957332d90f6d40e4 is vulnerable to Cross Site Scripting XSS via board.py...
CVE-2024-24157: Improper Neutralization of Input During Web Page Generation
Gnuboard g6 / https://github.com/gnuboard/g6 commit c2cc1f5069e00491ea48618d957332d90f6d40e4 is vulnerable to Cross Site Scripting XSS via board.py...