CVE-2025-4415 Piwik PRO - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-058

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Piwik PRO allows Cross-Site Scripting XSS.This issue affects Piwik PRO: from 0.0.0 before 1.3.2...

WordPress Ads Pro plugin <= 4.89 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Nguyễn Trung Kiên anhchangmutrang in WordPress Plugin Ads Pro versions = 4.89...

Malicious code in pro-article-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30d5ce94037caccdc08f9aa0d0b4e3c7ad2d0aa541b93fafeba6db855b86b2d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-57529

CVE-2024-57529 describes a Cross Site Scripting vulnerability in Jeppesen JetPlanner Pro v1.6.2.20 that could allow a remote attacker to execute arbitrary code. The CVE entry provides a CVSSv3.1 base score of 6.1 (Medium) with network attack vector, low attack complexity, no privileges required, ...

VulnCheck KEV: CVE-2025-47696

A vulnerability exists in the WordPress Blog Designer PRO for WordPress plugin that allows for disclosure of sensitive local files such as those that are used to store credentials...

CVE-2024-57529

Cross Site Scripting vulnerability in Jeppesen JetPlanner Pro v.1.6.2.20 allows a remote attacker to execute arbitrary code...

Remote Keyboard Desktop 1.0.1 - Remote Code Execution (RCE)

Exploit Title: Remote Keyboard Desktop 1.0.1 - Remote Code Execution RCE Date: 05/17/2025 Exploit Author: Chokri Hammedi Vendor Homepage: https://remotecontrolio.web.app/ Software Link: https://apps.microsoft.com/detail/9n0jw8v5sc9m?hl=neutral&gl=US&ocid=pdpshare Version: 1.0.1 Tested on: Windows...

Jeppesen JetPlanner Pro 安全漏洞

Jeppesen JetPlanner Pro is a powerful end-to-end flight planning and scheduling operations solution from Jeppesen USA. A security vulnerability exists in Jeppesen JetPlanner Pro version 1.6.2.20 that originates from a remote attacker who can execute arbitrary code...

PT-2025-22417

Name of the Vulnerable Software and Affected Versions Jeppesen JetPlanner Pro version 1.6.2.20 Description The issue allows a remote attacker to execute arbitrary code through a Cross Site Scripting vulnerability. This enables remote code execution. Recommendations For Jeppesen JetPlanner Pro...

Drupal Piwik PRO 安全漏洞

Drupal Piwik PRO is a module plugin in the Drupal content management system for the Drupal community. A security vulnerability exists in Drupal Piwik PRO versions prior to 1.3.2 that stems from improper input neutralization and could lead to a cross-site scripting attack...

PT-2025-22385 · Piwik Pro · Piwik Pro

Name of the Vulnerable Software and Affected Versions: Piwik PRO versions 0.0.0 through 1.3.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows an attacker to perform Cross-Site Scripting XSS...

CVE-2024-57529

Cross Site Scripting vulnerability in Jeppesen JetPlanner Pro v.1.6.2.20 allows a remote attacker to execute arbitrary code...

CVE-2025-37942

...

CVE-2025-37942

CVE-2025-37942 is described in connected advisories as a Linux kernel issue within the HID: pidff path. The root cause reported is “Make sure to fetch pool before checking SIMULTANEOUS_MAX,” indicating a logic/fence-check or data handling problem in pool management related to HID: pidff. Affected...

CVE-2025-4951

Editions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site scripting vulnerability in the "ScanName" field. Despite the application preventing the inclusion of special characters within the "ScanName" field, this could be bypassed by modifying the configuration...

CVE-2025-4951

Editions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site scripting vulnerability in the "ScanName" field. Despite the application preventing the inclusion of special characters within the "ScanName" field, this could be bypassed by modifying the configuration...

CVE-2025-4951

Editions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site scripting vulnerability in the "ScanName" field. Despite the application preventing the inclusion of special characters within the "ScanName" field, this could be bypassed by modifying the configuration...

CVE-2025-4951

CVE-2025-4951 affects Rapid7 AppSpider Pro prior to version 7.5.018. A stored cross-site scripting vulnerability exists in the ScanName field; the app prevents special characters but this can be bypassed by directly modifying the configuration file. Impact described: stored XSS risk in ScanName w...

CVE-2025-4951

Editions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site scripting vulnerability in the "ScanName" field. Despite the application preventing the inclusion of special characters within the "ScanName" field, this could be bypassed by modifying the configuration...

PT-2025-30037 · Ао'Сбк' · Communigate Pro

Уязвимость почтового сервера CommuniGate Pro связана с отсутствием аутентификации для критичной функции. Эксплуатация уязвимости, может позволить нарушителю, действующему удаленно, отправлять электронные письма с произвольным содержанием на любой почтовый адрес...