24804 matches found
CVE-2025-11308
A vulnerability was identified in Vanderlande Baggage 360 7.0.0. This issue affects some unknown processing of the file /api-addons/v1/messages. Such manipulation of the argument Message leads to cross site scripting. The attack may be performed from remote. The exploit is publicly available and...
CVE-2025-11308
CVE-2025-11308 affects Vanderlande Baggage 360 v7.0.0. The issue arises from processing the Message argument in the /api-addons/v1/messages endpoint, where manipulation can lead to cross-site scripting. Attack from remote is possible; a public PoC is noted. Documents confirm impact described as X...
CVE-2025-11308 Vanderlande Baggage 360 messages cross site scripting
A vulnerability was identified in Vanderlande Baggage 360 7.0.0. This issue affects some unknown processing of the file /api-addons/v1/messages. Such manipulation of the argument Message leads to cross site scripting. The attack may be performed from remote. The exploit is publicly available and...
CVE-2025-11308 Vanderlande Baggage 360 messages cross site scripting
A vulnerability was identified in Vanderlande Baggage 360 7.0.0. This issue affects some unknown processing of the file /api-addons/v1/messages. Such manipulation of the argument Message leads to cross site scripting. The attack may be performed from remote. The exploit is publicly available and...
CVE-2025-11308: Improper Neutralization of Input During Web Page Generation
A vulnerability was identified in Vanderlande Baggage 360 7.0.0. This issue affects some unknown processing of the file /api-addons/v1/messages. Such manipulation of the argument Message leads to cross site scripting. The attack may be performed from remote. The exploit is publicly available and...
PT-2025-40824
Name of the Vulnerable Software and Affected Versions Vanderlande Baggage 360 version 7.0.0 Description An issue exists in the processing of files within Vanderlande Baggage 360. Manipulation of the Message argument in the /api-addons/v1/messages API endpoint can lead to cross site scripting. Thi...
CVE-2022-50487
CVE-2022-50487 is rejected/not used and does not represent an active vulnerability entry.
CVE-2022-50476
The CVE-2022-50476 issue concerns ntb_netdev in the Linux kernel where TX/RX callback handlers can run in interrupt context via the DMA framework. The root cause was calling the interrupt-unsafe dev_kfree_skb() from ntb_netdev_tx_handler() and ntb_netdev_rx_handler(); the fix uses the interrupt-c...
Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel
Summary A stored Cross-Site Scripting XSS vulnerability in FlowiseAI allows a user to inject arbitrary JavaScript code via message input. When an administrator views messages using the "View Messages" button in the workflow UI, the malicious script executes in the context of the admin’s browser,...
GHSA-964P-J4GG-MHWC Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel
Summary A stored Cross-Site Scripting XSS vulnerability in FlowiseAI allows a user to inject arbitrary JavaScript code via message input. When an administrator views messages using the "View Messages" button in the workflow UI, the malicious script executes in the context of the admin’s browser,...
Cross-site Scripting (XSS)
Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Cross-site Scripting XSS via the workflow UI View Messages feature in the admin panel. An attacker can execute arbitrary JavaScript in the context of an administrator's browser by injecting a specially...
EUVD-2025-6736
Malicious code in bioql PyPI...
EUVD-2025-19700
Malicious code in bioql PyPI...
EUVD-2024-21397
Malicious code in bioql PyPI...
EUVD-2023-32063
Malicious code in bioql PyPI...
EUVD-2025-19065
Malicious code in bioql PyPI...
EUVD-2025-10925
Malicious code in bioql PyPI...
EUVD-2025-18401
Malicious code in bioql PyPI...