CVE-2025-62798 Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax

Sharp is a content management framework built for Laravel as a package. Prior to 9.11.1, a Cross-Site Scripting XSS vulnerability was discovered in code16/sharp when rendering content using the SharpShowTextField component. In affected versions, expressions wrapped in & were evaluated by Vue. Thi...

EUVD-2011-2319

Malware in sbrugna...

EUVD-2000-1221

Malware in sbrugna...

EUVD-2021-16552

Malware in sbrugna...

EUVD-2020-6852

Malware in sbrugna...

EUVD-2017-1760

Malware in sbrugna...

EUVD-2002-1001

Malware in sbrugna...

EUVD-2020-24412

Malware in sbrugna...

EUVD-2005-2171

Malware in sbrugna...

EUVD-2002-1000

Malware in sbrugna...

EUVD-2020-24696

Malware in sbrugna...

EUVD-2023-0209

Malicious code in bioql PyPI...

EUVD-2024-18661

Malicious code in bioql PyPI...

EUVD-2025-26698

Malicious code in bioql PyPI...

EUVD-2025-11035

Malicious code in bioql PyPI...

appRain CMF cross-site scripting vulnerability (CNVD-2025-21112)

appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF, which is caused by improper validation of user input by the /apprain/developer/addons/update/ace endpoint. An attacker could use this vulnerability to steal the victim's cookie-based...

CVE-2025-41049

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAddonlayouts' and 'dataAddonlayoutsexcept' parameters in /apprain/developer/addons/update/appform...

CVE-2025-41052

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAddonlayouts' and 'dataAddonlayoutsexcept' parameters in /apprain/developer/addons/update/canvasjs...

CVE-2025-41046

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAddonlayouts' and 'dataAddonlayoutsexcept' parameters in /apprain/developer/addons/update/960grid...

CVE-2025-41039

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'datasconfigadminlandingpage', 'datasconfigcurrency', 'datasconfigdbversion', 'datasconfigdefaultpagination',...