EUVD-2024-38602

Malicious code in bioql PyPI...

EUVD-2024-42320

Malicious code in bioql PyPI...

EUVD-2024-27372

Malicious code in bioql PyPI...

EUVD-2024-27371

Malicious code in bioql PyPI...

EUVD-2024-54697

Malicious code in bioql PyPI...

EUVD-2024-55003

Malicious code in bioql PyPI...

EUVD-2024-54704

Malicious code in bioql PyPI...

EUVD-2024-16727

Malicious code in bioql PyPI...

CVE-2024-56915

A cross-site scripting XSS flaw has been discovered in netbox-community. An attacker who is able to populate the RSS feed may be able to inject javascript, which will be executed in the context of another user. Mitigation Mitigation for this issue is either not available or the currently availabl...

CVE-2024-56915

Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting XSS via the RSS feed widget...

CVE-2024-56915

Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting XSS via the RSS feed widget...

Netbox 安全漏洞

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A security vulnerability exists in Netbox version v4.1.7, which stems from the vulnerability of the RSS feed widget to cross-site scripting attacks...

CVE-2024-56915

Netbox Community versions v4.1.7 through v4.2.1 are vulnerable to a Cross-Site Scripting (XSS) flaw in the RSS feed widget . An attacker capable of populating the RSS feed can inject malicious JavaScript, which will execute in the context of another user's session. To remediate this issue, users ...

CVE-2024-56915

Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting XSS via the RSS feed widget...

PT-2025-26975 · Unknown · Netbox Community

Name of the Vulnerable Software and Affected Versions: Netbox Community versions 4.1.7 through 4.2.1 Description: The issue is related to Cross Site Scripting XSS via the RSS feed widget. This allows for potential malicious script execution. Recommendations: For Netbox Community version 4.1.7,...

CVE-2024-56915: Improper Neutralization of Input During Web Page Generation

Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting XSS via the RSS feed widget...

CVE-2024-56915

Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting XSS via the RSS feed widget...

CVE-2024-56917

Netbox Community 4.1.7 is vulnerable to Cross Site Scripting XSS via the maintenance banner in maintenance mode...

CVE-2024-56916

A cross-site scripting flaw was found in Netbox. An attacker with an authenticated account on the system can add malicious Javascript code to a banner field and potentially execute this code in the context of another user's session. Mitigation Mitigation for this issue is either not available or...

CVE-2024-56916

In Netbox Community 4.1.7, once authenticated, Configuration History Addis vulnerable to cross-site scripting XSS due to the current value field rendering user supplied html. An authenticated attacker can leverage this to add malicious JavaScript to the any banner field. Once a victim edits a...