312 matches found
Cross-site Scripting (XSS)
Overview @haxtheweb/haxcms-nodejs is a HAXcms nodejs backend Affected versions of this package are vulnerable to Cross-site Scripting XSS via the processing of uploaded .html files. An attacker can execute arbitrary JavaScript in the context of another user's session by uploading .html files...
CVE-2025-55310
An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. An attacker able to alter or replace the static HTML files used by the StartPage feature can cause the application to load malicious or compromised content upon startup. This may result in...
Improper Access Control
Vite is vulnerable to Improper Access Control. The vulnerability is due to the dev and preview servers serving any HTML files on the machine regardless of the server.fs settings, which allows an attacker to access unintended files when the Vite server is exposed to the network, potentially leadin...
EUVD-2019-6571
Malware in sbrugna...
EUVD-2017-3257
Malware in sbrugna...
EUVD-2006-2099
Malware in sbrugna...
EUVD-2018-0394
Malware in sbrugna...
EUVD-2007-5824
Malware in sbrugna...
EUVD-2008-0483
Malware in sbrugna...
EUVD-2009-2832
Malware in sbrugna...
EUVD-2009-2253
Malware in sbrugna...
EUVD-2017-18011
Malware in sbrugna...
EUVD-2020-29695
Malware in sbrugna...
EUVD-2004-2484
Malware in sbrugna...
EUVD-2024-38416
Malicious code in bioql PyPI...
EUVD-2021-30208
Malicious code in bioql PyPI...
EUVD-2024-1743
Malicious code in bioql PyPI...
EUVD-2024-30448
Malicious code in bioql PyPI...