4472 matches found
Notorious Malware, Spam Host “Prospero” Moves to Kaspersky Lab
One of the most notorious providers of abuse-friendly "bulletproof" web hosting for cybercriminals has started routing its operations through networks run by the Russian antivirus and security firm Kaspersky Lab , KrebsOnSecurity has learned. Security experts say the Russia-based service provider...
CVE-2025-25206 Incorrect input validation could allow an authenticated user to read sensitive information
eLabFTW is an open source electronic lab notebook for research labs. Prior to version 5.1.15, an incorrect input validation could allow an authenticated user to read sensitive information, including login token or other content stored in the database. This could lead to privilege escalation if...
CVE-2025-24616
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UIUX Lab Uix Page Builder uix-page-builder allows Reflected XSS.This issue affects Uix Page Builder: from n/a through = 1.7.3...
CVE-2025-24616 WordPress Uix Page Builder Plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UIUX Lab Uix Page Builder uix-page-builder allows Reflected XSS.This issue affects Uix Page Builder: from n/a through = 1.7.3...
CVE-2025-24616
CVE-2025-24616 concerns WordPress Uix Page Builder (plugin) versions up to 1.7.3. The issue is a reflected XSS caused by improper input neutralization during web page generation. The CVE’s base metrics (CVSS 3.1) indicate Network attack vector, Low confidentiality/integrity/availability impact, a...
PT-2025-6388 · Digital China · Dcbi-Netlog-Lab Gateway
Name of the Vulnerable Software and Affected Versions: Digital China DCBI-Netlog-LAB Gateway version 1.0 Description: The issue is related to a buffer overflow vulnerability due to the lack of length verification when saving parental control configuration information. This can cause the remote...
Digital China Networks DCBI-Netlog-LAB 安全漏洞
Digital China Networks DCBI-Netlog-LAB DCN DCBI-Netlog-LAB is an Internet Behavior Logging System from Digital China Networks DCN, China. A security vulnerability exists in Digital China Networks DCBI-Netlog-LAB version 1.0 that stems from a lack of length validation and a buffer overflow...
CVE-2025-25530
Buffer overflow vulnerability in Digital China DCBI-Netlog-LAB Gateway 1.0 due to the lack of length verification, which is related to saving parental control configuration information. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute...
CVE-2025-1157
CVE-2025-1157 pertains to Allims lab.online up to 20250201, where the SQL injection vulnerability is triggered by manipulating the recuperacao parameter in the file /model/model_recuperar_senha.php. The issue can be exploited remotely and the exploit has been publicly disclosed. Connected sources...
Allims lab.online 安全漏洞
Allims lab.online is a laboratory online service platform of AIILMS India, which is mainly used to provide customers with access to laboratory analysis results. Allims lab.online has a security vulnerability that originates from the recuperacao parameter of the /model/modelrecuperarsenha.php file...
CMU CERT/CC VINCE v2.0.6 Stored XSS
Summary VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordinated vulnerability disclosure. VINCE is a Python-based web platform. Description The framework suffers from an authenticated stored cross-site scripting...
CVE-2025-22677
Missing Authorization vulnerability in UIUX Lab Uix Shortcodes uix-shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uix Shortcodes: from n/a through = 2.0.3...
CVE-2024-43982
Missing Authorization vulnerability in Geek Code Lab Login As Users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login As Users: from n/a through 1.4.3...
CVE-2024-43311
Improper Privilege Management vulnerability in Geek Code Lab Login As Users allows Privilege Escalation.This issue affects Login As Users: from n/a through 1.4.2...
CVE-2024-22307
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay.This issue affects WP-Lister Lite for eBay: from n/a through = 3.5.7...
CVE-2024-0306
A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adminloginprocess.php. The manipulation of the argument adminpassword leads to sql injection. It is possible to initiate the attack...
CVE-2024-0307
A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file loginprocess.php. The manipulation of the argument password leads to sql injection. The attack can be initiated remotely. The explo...
CVE-2025-22677
Missing Authorization vulnerability in UIUX Lab Uix Shortcodes uix-shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uix Shortcodes: from n/a through = 2.0.3...
