CVE-2019-25229 Kentico Xperience <= 12.0.29 MVC Forms Unrestricted File Upload

An unrestricted file upload vulnerability in Kentico Xperience allows authenticated users with 'Read data' permissions to upload arbitrary file types via MVC form file uploader components. Attackers can manipulate file names and upload potentially malicious files to the system, enabling...

CVE-2019-25229: Unrestricted Upload of File with Dangerous Type

An unrestricted file upload vulnerability in Kentico Xperience allows authenticated users with 'Read data' permissions to upload arbitrary file types via MVC form file uploader components. Attackers can manipulate file names and upload potentially malicious files to the system, enabling...

EUVD-2020-4399

Malware in sbrugna...

EUVD-2020-0856

Malware in sbrugna...

EUVD-2024-3320

Malicious code in bioql PyPI...

EUVD-2024-0410

Malicious code in bioql PyPI...

EUVD-2025-28995

Malicious code in bioql PyPI...

EUVD-2025-29001

Malicious code in bioql PyPI...

EUVD-2022-3185

Malicious code in bioql PyPI...

EUVD-2023-37807

Malicious code in bioql PyPI...

EUVD-2023-3041

Malicious code in bioql PyPI...

EUVD-2024-52870

Malicious code in bioql PyPI...

EUVD-2023-2990

Malicious code in bioql PyPI...

EUVD-2024-52869

Malicious code in bioql PyPI...

com.bbossgroups.security:bboss-security (>=4.10.8, <=5.0.0), com.bbossgroups.security:bboss-security-web (>=4.10.8, <=5.0.0) +7 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (3.7.6)

net.sf.jasperreports:jasperreports MAVEN version 3.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.bbossgroups.security:bboss-security =4.10.8, =4.10.8, =4.10.8, =4.10.8, =4.10.8, =4.10....

br.uff.sti:jersey-mvc-jasper (0.2), com.nablarch.report:nablarch-report (1.1.0) +1 more potentially affected by CVE-2025-10492 via net.sf.jasperreports:jasperreports (5.6.1)

net.sf.jasperreports:jasperreports MAVEN version 5.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - br.uff.sti:jersey-mvc-jasper 0.2 - com.nablarch.report:nablarch-report 1.1.0 -...

CVE-2025-10271

A vulnerability was found in erjinzhi 10OA 1.0. This impacts an unknown function of the file /trial/mvc/finder. The manipulation of the argument Name results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was...

CVE-2025-10274

A security flaw has been discovered in erjinzhi 10OA 1.0. Affected by this issue is some unknown functionality of the file /trial/mvc/item. Performing manipulation of the argument Name results in cross site scripting. The attack may be initiated remotely. The exploit has been released to the publ...

CVE-2025-10274

The CVE-2025-10274 entry concerns erjinzhi 10OA 1.0 with a vulnerability in the file /trial/mvc/item where manipulation of the Name argument enables cross-site scripting. The issue is exploitable remotely and an exploit has been released publicly; vendor was contacted but did not respond. Availab...

CVE-2025-10274: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in erjinzhi 10OA 1.0. Affected by this issue is some unknown functionality of the file /trial/mvc/item. Performing manipulation of the argument Name results in cross site scripting. The attack may be initiated remotely. The exploit has been released to the publ...