223 matches found
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the upload, create, and rename features for files with HTML and SVG types, due to insufficient content-type validation and lack of output sanitization. An attacker can execute arbitrary scripts in the contex...
PT-2025-45330
alexusmai laravel-file-manager 3.3.1 is vulnerable to Cross Site Scripting XSS. The application permits user-controlled upload, create, and rename of files to HTML and SVG types and serves those files inline without adequate content-type validation or output sanitization...
CVE-2025-63307
alexusmai laravel-file-manager 3.3.1 is vulnerable to Cross Site Scripting XSS. The application permits user-controlled upload, create, and rename of files to HTML and SVG types and serves those files inline without adequate content-type validation or output sanitization...
CVE-2025-34305 IPFire < v2.29 Stored XSS via Multiple Methods in cleanhtml()
IPFire versions prior to 2.29 Core Update 198 contain multiple stored cross-site scripting XSS vulnerabilities caused by a bug in the cleanhtml function /var/ipfire/header.pl that fails to apply HTML-entity encoding to user input. When an authenticated user submits data to affected endpoints - fo...
EUVD-2020-0516
Malware in sbrugna...
EUVD-2020-17309
Malware in sbrugna...
EUVD-2020-26905
Malware in sbrugna...
EUVD-2020-26909
Malware in sbrugna...
EUVD-2020-26908
Malware in sbrugna...
EUVD-2020-26907
Malware in sbrugna...
EUVD-2021-2327
Malware in sbrugna...
EUVD-2019-7424
Malware in sbrugna...
EUVD-2020-26906
Malware in sbrugna...
EUVD-2020-26910
Malware in sbrugna...
EUVD-2021-18929
Malware in sbrugna...
EUVD-2021-11524
Malware in sbrugna...
EUVD-2019-16063
Malware in sbrugna...
EUVD-2020-17407
Malware in sbrugna...