ROOT-APP-NPM-CVE-2026-33941 CVE-2026-33941 in @rootio/handlebars - Patched by Root

Root has patched CVE-2026-33941 in the @rootio/handlebars package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-21538 CVE-2024-21538 in @rootio/cross-spawn - Patched by Root

Root has patched CVE-2024-21538 in the @rootio/cross-spawn package for Root:npm. Multiple fixed versions available...

CVE-2025-32440

NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to...

CVE-2025-32386 affecting package helm for versions less than 3.15.2-3

CVE-2025-32386 affecting package helm for versions less than 3.15.2-3. A patched version of the package is available...

CVE-2023-46127

Frappe is a full-stack web application framework that uses Python and MariaDB on the server side and an integrated client side library. A malicious Frappe user with desk access could create documents containing HTML payloads allowing HTML Injection. This vulnerability has been patched in version...

CVE-2019-19453

Wowza Streaming Engine before 4.8.5 allows XSS issue 1 of 2. An authenticated user, with access to the proxy license editing is able to insert a malicious payload that will be triggered in the main page of server settings. This issue was resolved in Wowza Streaming Engine 4.8.5...

CISA Warns of Flaws in Siemens, GE Digital, and Contec Industrial Control Systems

The U.S. Cybersecurity and Infrastructure Security Agency CISA has published four Industrial Control Systems ICS advisories, calling out several security flaws affecting products from Siemens, GE Digital, and Contec. The most critical of the issues have been identified in Siemens SINEC INS that...

mywinesystem.com Cross Site Scripting vulnerability

Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting mywinesystem.com website and its users. Following...

mrweb.com XSS vulnerability

Vulnerable URL: http://www.mrweb.com/jobs/scotland/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 574090 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitt...

library.wur.nl XSS vulnerability

Vulnerable URL: http://library.wur.nl/WebQuery/edepot"'--!/239363/ Details: Description| Value ---|--- Patched:| Yes, at 10.11.2017 Latest check for patch:| 10.11.2017 17:12 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

obo.hr XSS vulnerability

Vulnerable URL: http://obo.hr/search/hr-hr.html?query=%27%22%3E%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12165478 VIP website status:| No Coordinated...

vyper.io XSS vulnerability

Vulnerable URL: https://vyper.io/user/register?redirect=abc"xss go skrrrrrrrra pa pa ka ka ka skeedy ki pa pa and a poom poom prrrrrrrrr boom SKIYA dru bo po bo po bom pom pom Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.12.2017 Vulnerability type:| XSS Vulnerabili...

hartorama.gr XSS vulnerability

Vulnerable URL: http://www.hartorama.gr/pages/searchProducts.aspx?lang=el&search-for;=%20%27%22/%3E%3E%3C/script%3E%3Cscript%3Ealert/OPENBUGBOUNTY/%3C/script%3E=42192 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

gelenkfrei.koelbel.de XSS vulnerability

Vulnerable URL: http://gelenkfrei.koelbel.de/search/node/%22/%3E%27%3E%22%3EI%3Ci%3EI%3Csvg/onload%3Dalert%28/openbugbounty/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 10:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

novalnet.de XSS vulnerability

Vulnerable URL: https://www.novalnet.de/search/node/%22%3e%3cimg%20src=x%20onerror=prompt'OPENBUGBOUNTY'%3e Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 15:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

geekbuying.com XSS vulnerability

Vulnerable URL: http://www.geekbuying.com/search?keyword=xx%22%20onmouseover=%22alert%27OPENBUGBOUNTY%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7115 VIP website status:| Yes Check geekbuying.com SSL...

cineperray.fr XSS vulnerability

Vulnerable URL: http://cineperray.fr/FR/cine-search?search=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9522917 VIP website status:| No Check cineperray.fr SSL connection:|...

psndealer.com XSS vulnerability

Vulnerable URL: https://www.psndealer.com/dealers/default.asp?ref=rvwsdealer Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 188750 VIP website status:| No Check psndealer.com SSL...

arukereso.hu XSS vulnerability

Vulnerable URL: http://www.arukereso.hu/admin/Login Details: Description| Value ---|--- Patched:| Yes, at 11.01.2017 Latest check for patch:| 11.01.2017 12:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6625 VIP website status:| Yes Coordinated Disclosure...

injuryattorneysac.com XSS vulnerability

Vulnerable URL: http://injuryattorneysac.com/users/editorialdisp.php?mn="=services Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 25795795 VIP website...