410 matches found
CVE-2025-63527
A cross-site scripting XSS vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and hprofile.php components. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript...
Improper Neutralization
Overview Affected versions of this package are vulnerable to Improper Neutralization of user-supplied input in several fields, including repository descriptions, project names, git commit author names, commit messages, access token names, and webhook URLs. An attacker can inject malicious ANSI...
CVE-2025-62779 Frappe Learning users were able to add HTML through input fields in the Job Form
Frappe Learning is a learning system that helps users structure their content. In Frappe Learning 2.39.1 and earlier, users were able to add HTML through input fields in the Job Form...
CVE-2025-62414
Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the “Create New Customer” feature in the admin panel is vulnerable to Cross-Site Scripting XSS. An attacker with access to the admin create-customer form can inject malicious JavaScript payloads into certain input fields...
CVE-2025-59986
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the input fields in Model Devices that, when visited by another user, enables the attacker to execute commands with the...
CVE-2025-59986 Junos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injection
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the input fields in Model Devices that, when visited by another user, enables the attacker to execute commands with the...
CVE-2025-59986
CVE-2025-59986 affects Juniper Networks Junos Space versions prior to 24.1R4. It is an input handling (XSS) vulnerability in Model Devices that lets an attacker inject script tags, which can be executed in the context of other users, including administrators. The issue arises from improper input ...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Notifications widget when processing user-supplied input in text fields such as First Name, Middle Name, Last Name, Other Reason, or the name of flagged content. An attacker can execute arbitrary web...
EUVD-2005-4544
Malware in sbrugna...
EUVD-2021-12674
Malware in sbrugna...
EUVD-2005-3813
Malware in sbrugna...
EUVD-2018-18543
Malware in sbrugna...
EUVD-2018-3147
Malware in sbrugna...
EUVD-2015-1364
Malware in sbrugna...
EUVD-2020-21342
Malware in sbrugna...
EUVD-2020-21625
Malware in sbrugna...
EUVD-2006-2663
Malware in sbrugna...
EUVD-2015-7446
Malware in sbrugna...