8761 matches found
CVE-2025-60314
Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting XSS due to the lack of input sanitization on the product name parameter Nombre:Producto allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript...
PT-2025-41383
Name of the Vulnerable Software and Affected Versions Oct8ne Chatbot version 2.3 Description A stored cross-site scripting XSS issue exists in Oct8ne Chatbot version 2.3. This allows an attacker to execute JavaScript code in a victim’s browser. The attack is performed by injecting a malicious...
CVE-2025-61788 Opencast Paella Player 7 vulnerable to Cross-Site-Scripting
Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 17.8 and 18.2, the paella would include and render some user inputs metadata like title, description, etc. unfiltered and unmodified. The vulnerability allows attackers to...
Cross-site Scripting (XSS)
Overview webreinvent/vaahcms is a laravel based open-source web application development platform shipped with headless content management system. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the upload function in the MediaController.php file. An attacker can...
CVE-2025-60314: Improper Neutralization of Input During Web Page Generation
Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting XSS due to the lack of input sanitization on the product name parameter Nombre:Producto allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript...
ROS-20251008-01
The Thunderbird email client vulnerability, Thunderbird ESR is related to insufficient authentication of the data. Exploitation of the vulnerability could allow an attacker acting remotely to affect the data integrity Vulnerability of Address Book URI fields of Thunderbird, Thunderbird ESR mail...
PT-2025-41257
Name of the Vulnerable Software and Affected Versions Configuroweb Sistema Web de Inventario version 1.0 Description The software is susceptible to a Stored Cross-Site Scripting XSS issue because of insufficient input sanitization. Specifically, the Nombre:Producto parameter lacks proper...
CVE-2025-56243
A Cross-Site Scripting XSS vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0, where the eventid GET parameter is improperly handled. An attacker can craft a malicious URL to execute arbitrary JavaScript in the victim s browser by injecting code into th...
EUVD-2021-23202
Malware in sbrugna...
EUVD-2002-0472
Malware in sbrugna...
EUVD-2008-5087
Malware in sbrugna...
EUVD-2002-0165
Malware in sbrugna...
EUVD-2021-2084
Malware in sbrugna...
EUVD-2002-0456
Malware in sbrugna...
EUVD-2017-1589
Malware in sbrugna...
EUVD-2010-3911
Malware in sbrugna...
EUVD-2020-4079
Malware in sbrugna...
EUVD-2020-29885
Malware in sbrugna...