19 matches found
CVE-2025-66606
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVRN, UNSVRN, HMIWEB,...
CVE-2025-66606
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVRN, UNSVRN, HMIWEB,...
CVE-2025-66606
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVRN, UNSVRN, HMIWEB,...
CVE-2025-66606
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVRN, UNSVRN, HMIWEB,...
CVE-2025-66606
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVRN, UNSVRN, HMIWEB,...
PT-2026-7054
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVRN, UNSVRN, HMIWEB,...
EUVD-2025-23979
Malicious code in bioql PyPI...
CVE-2025-54940
Summary of CVE-2025-54940 : A HTML injection vulnerability exists in WordPress plugin Advanced Custom Fields prior to version 6.4.3 . Attackers may have crafted HTML that is rendered, potentially tampering with page display. This vulnerability is evidenced across multiple feeds (NVD, RH, JVN, CNV...
WordPress WP Delicious Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress WP Delicious, which stems from improper input neutralization, and can be exploited by attackers to tamper with web...
GHSA-4542-P56H-8XWW Cross-Site Scripting (XSS) vulnerabilities in Neos
It has been discovered that Neos is vulnerable to several XSS attacks. Through these vulnerabilities, an attacker could tamper with page rendering, redirect victims to a fake login page, or capture user credentials such as cookies. With the potential backdoor upload an attacker could gain access ...
The vulnerability of the OpenID Connect Login service for the Keycloak identity and access management software allows a hacker to disclose protected information, alter the appearance of the web page, and perform phishing attacks.
The vulnerability of the OpenID Connect Login service for the Keycloak identity management and access control system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information, alter the...
The vulnerabilities of Firefox browsers, Firefox ESR, and the Thunderbird email client stem from the lack of measures taken to protect the structure of web pages. This allows attackers to disclose protected information, alter the appearance of web pages, and perform phishing attacks.
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird exists due to the lack of security measures for protecting the structure of web pages. Exploiting this vulnerability allows a malicious actor to disclose protected information, alter the appearance of web...
Limbas 跨站脚本漏洞
Limbas is a web-based enterprise software factory. A cross-site scripting vulnerability exists in Limbas version 4.3.36.1319, which can be exploited to execute malicious code, tamper with pages to perform phishing attacks, and trick users into logging in again and then obtaining their login...
WBCE CMS 跨站脚本漏洞
WBCE CMS is a WBCB CMS forum that converts HTML to WBCB CMS templates.A cross-site scripting vulnerability exists in WBCE CMS version 1.5.2, which can be exploited by attackers to execute malicious code, tamper with pages to perform phishing attacks, and trick users into logging in again and then...
Jspxcms has an XSS vulnerability
jspxcms is an open source, Java-based content management system CMS. Jspxcms suffers from an XSS vulnerability, which is due to the system failing to strictly filter user input information. An attacker can exploit this vulnerability to insert XSS execution code to directly trigger pop-up window...
USN-3519-1 tomcat7, tomcat8 vulnerabilities
It was discovered that Tomcat incorrectly handled certain pipelined requests when sendfile was used. A remote attacker could use this issue to obtain wrong responses possibly containing sensitive information. CVE-2017-5647 It was discovered that Tomcat incorrectly used the appropriate facade...
Cross-Site Request Forgery Vulnerability in ECshop
ECShop is a B2C independent online store system, suitable for enterprises and individuals to quickly build a personalized online store. The system is based on PHP language and MYSQL database structure development of cross-platform open source program. ECshop cross-site request forgery...
Reflective XSS cross-site scripting vulnerability in Youdiancms enterprise website management system
Youdiancms Enterprise Website Management System is an enterprise website building system developed by Changsha Youdian Software Technology Co. An XSS cross-site scripting vulnerability exists in the index.php/channel/search/ page of the Youdiancms enterprise website management system. An attacker...
NASA.gov Cross Site Scripting
Exploit Title: NASA.gov main-domain DOM-XSS Date: 01/04/2015 Author: Yann CAM - Georges TAUPIN @ Synetis - ASafety Vendor or Software Link: www.nasa.gov Version: / Category: DOM-XSS Google dork: Tested on: NASA.gov main-domain NASA description :...