574 matches found
EUVD-2017-17679
Malware in sbrugna...
EUVD-2019-0779
Malware in sbrugna...
EUVD-2019-7650
Malware in sbrugna...
EUVD-2017-9982
Malware in sbrugna...
EUVD-2018-20028
Malware in sbrugna...
EUVD-2022-4752
Malicious code in bioql PyPI...
EUVD-2023-1699
Malicious code in bioql PyPI...
EUVD-2025-18891
Malicious code in bioql PyPI...
EUVD-2022-49962
Malicious code in bioql PyPI...
EUVD-2024-1857
Malicious code in bioql PyPI...
EUVD-2024-39152
Malicious code in bioql PyPI...
EUVD-2022-7274
Malicious code in bioql PyPI...
EUVD-2022-3148
Malicious code in bioql PyPI...
CVE-2025-59546 DNN Vulnerable to Stored XSS Using Backend Admin Credentials
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.1.0, administrators and content editors can set html in module titles that could include javascript which could be used for XSS based attacks. This issue has been patched ...
CVE-2008-20001
activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the context of the vulnerable process. Although t...
webkitgtk: maliciously crafted web content may lead to arbitrary code execution due to use after free
A use-after-free vulnerability was found in WebKitGTK. The vulnerability occurs when processing HTML content in WebKit. This flaw allows a remote attacker to trick the victim into opening a specially crafted web page, triggering a use-after-free error and leading to the execution of arbitrary cod...
CVE-2025-48700
An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting XSS vulnerability in the Zimbra Classic UI allows attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information...
CVE-2024-41707
An issue was discovered in Archer Platform 6 before 2024.06. Authenticated users can achieve HTML content injection. A remote authenticated malicious Archer user could potentially exploit this to store malicious HTML code in a trusted application data store. When victim users access the data stor...
CVE-2019-19682
nopCommerce through 4.20 allows XSS in the SaveStoreMappings of the components \Presentation\Nop.Web\Areas\Admin\Controllers\NewsController.cs and \Presentation\Nop.Web\Areas\Admin\Controllers\BlogController.cs via Body or Full to Admin/News/NewsItemEdit/id Admin/Blog/BlogPostEdit/id. NOTE: the...