CVE-2022-50966

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage module. The datecreated, datefrom, dateto, and createdat parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via crafted GET requests...

EUVD-2005-0675

Malware in sbrugna...

EUVD-2005-4258

Malware in sbrugna...

EUVD-2014-2284

Malware in sbrugna...

EUVD-2012-4817

Malware in sbrugna...

EUVD-2010-4628

Malware in sbrugna...

EUVD-2008-4337

Malware in sbrugna...

EUVD-2013-3459

Malware in sbrugna...

EUVD-2005-4257

Malware in sbrugna...

EUVD-2008-2085

Malware in sbrugna...

EUVD-2012-1322

Malware in sbrugna...

EUVD-2005-4633

Malware in sbrugna...

EUVD-2004-2012

Malware in sbrugna...

EUVD-2021-28115

Malicious code in bioql PyPI...

EUVD-2022-2808

Malicious code in bioql PyPI...

CVE-2025-57757

Contao CMS vulnerability CVE-2025-57757: In Contao versions prior to 5.3.38 and 5.6.1, protected news archives in the news feed are not filtered, causing confidential items to appear in the RSS feed. This is patched in 5.3.38 and 5.6.1. Workaround: do not include protected archives in the feed. A...

CVE-2025-57757 Contao discloses information in the news module

Contao is an Open Source CMS. In versions starting from 5.0.0 and prior to 5.3.38 and 5.6.1, if a news feed contains protected news archives, their news items are not filtered and become publicly available in the RSS feed. This issue has been patched in versions 5.3.38 and 5.6.1. A workaround...

Contao can disclose sensitive information in the news module

Impact If a news feed contains protected news archives, their news items are not filtered and become publicly available in the RSS feed. Patches Update to Contao 5.3.38 or 5.6.1. Workarounds Do not add protected news archives to the news feed page. For more information If you have any questions o...

GHSA-W53M-GXVG-VX7P Contao can disclose sensitive information in the news module

Impact If a news feed contains protected news archives, their news items are not filtered and become publicly available in the RSS feed. Patches Update to Contao 5.3.38 or 5.6.1. Workarounds Do not add protected news archives to the news feed page. For more information If you have any questions o...

CVE-2020-27377

A cross-site scripting XSS vulnerability was discovered in the Administrator panel on the 'Setting News' module on CMS Made Simple 2.2.14 which allows an attacker to execute arbitrary web scripts...