CVE-2024-13056: Improper Neutralization of Input During Web Page Generation

The Dyn Business Panel WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-24364: Improper Neutralization of Special Elements in Output Used by a Downstream Component

vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwardenrs. Attacker with authenticated access to the vaultwarden admin panel can execute arbitrary code in the system. The attacker could then change some settings to use sendmail as mail agent but adjus...

Vaultwarden -- Multiple vulnerabilities

The Vaultwarden project reports: RCE in the admin panel. Getting access to the Admin Panel via CSRF. Escalation of privilege via variable confusion in OrgHeaders trait...

CVE-2025-21530

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Panel Processor. Supported versions that are affected are 8.60 and 8.61. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

PT-2025-4252

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.60 through 8.61 Description The issue is related to a buffer read beyond bounds in the Panel Processor component. It allows a low-privileged attacker with network access via HTTP to compromise...

CVE-2024-54792

A Cross-Site Request Forgery CSRF vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside the application they are logged in, like adding, editing or deleting users...

CVE-2024-54792: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside the application they are logged in, like adding, editing or deleting users...

PT-2025-3072

Name of the Vulnerable Software and Affected Versions SpagoBI version 3.5.1 Description A Cross-Site Request Forgery CSRF issue has been found in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside the application they are logged in,...

CVE-2024-54792

A Cross-Site Request Forgery CSRF vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside the application they are logged in, like adding, editing or deleting users...

CVE-2025-21530: Out-of-bounds Read

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Panel Processor. Supported versions that are affected are 8.60 and 8.61. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2024-54792

SpagoBI version 3.5.1 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability within the user administration panel. The root cause is a lack of CSRF countermeasures in the panel used to manage user grants. An authenticated attacker can trick a victim with administrative righ...

Exploit for Cross-Site Request Forgery (CSRF) in Eng Spagobi

CVE-2024-54792 Severity : Medium 6.1 CVSS sc...

CVE-2025-0458

A vulnerability classified as problematic was found in Virtual Computer Vysual RH Solution 2024.12.1. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Panel. The manipulation of the argument page leads to cross site scripting. The attack can...

CVE-2025-0458 Virtual Computer Vysual RH Solution Login Panel index.php cross site scripting

A vulnerability classified as problematic was found in Virtual Computer Vysual RH Solution 2024.12.1. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Panel. The manipulation of the argument page leads to cross site scripting. The attack can...

CVE-2025-0458 Virtual Computer Vysual RH Solution Login Panel index.php cross site scripting

A vulnerability classified as problematic was found in Virtual Computer Vysual RH Solution 2024.12.1. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Panel. The manipulation of the argument page leads to cross site scripting. The attack can...

CVE-2025-0458

CVE-2025-0458 affects Virtual Computer Vysual RH Solution 2024.12.1, where the Login Panel’s /index.php contains vulnerable functionality. The described issue arises from manipulating the page argument, enabling remote cross-site scripting (XSS). The vulnerability is publicly disclosed and attack...

PT-2025-3894 · Virtual Computer · Virtual Computer Vysual Rh Solution

Name of the Vulnerable Software and Affected Versions: Virtual Computer Vysual RH Solution version 2024.12.1 Description: A problematic issue was found in the Login Panel component, specifically in the /index.php file, affecting an unknown functionality. The manipulation of the page argument lead...

CVE-2025-0458: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Virtual Computer Vysual RH Solution 2024.12.1. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Panel. The manipulation of the argument page leads to cross site scripting. The attack can...

PT-2025-4378

Name of the Vulnerable Software and Affected Versions NamelessMC versions prior to 2.1.3 Description The issue allows an admin to add an extra field that users can fill out, but users can inject javascript code into this field. This code is activated when a staffer visits the user's profile on th...

CVE-2025-22142: Improper Neutralization of Input During Web Page Generation

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In affected versions an admin can add the ability to have users fill out an additional field and users can inject javascript code into it that would be activated once a staffer visits the user's profile on staff...