CVE-2024-25503

CVE-2024-25503 脆弱性タイプ : Cross Site Scripting XSS 製品: Advanced REST Client desktop application 脆弱性のあるバージョン: 17.0.9 製品のベンダー:https://www.advancedrestclient.com/ 1. 説明 Advanced REST Client v.17.0.9 におけるクロスサイトスクリプティング XSS の脆弱性により、リモートの攻撃者が任意のコードを実行し、機密情報を取得することが可能です。これは、New Project 機能の 'edit details'...

CVE-2024-29375

CSV-Injection-PoC Addactis IBNRS 3.10.3.107 における CSV インジェクション AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L CVSS: 7.1, 影響スコア: 5.3, 悪用スコア: 1.3 影響を受けるコンポーネント: Project Description、Identifiers、Custom Triangle Name Input Triangles 内、および Yield Curve Name パラメータ スクリーンショット 1: メモ帳を開くために、Excelの数式をプロジェクト説明として注入する...

Invoice Ninja 安全漏洞

Invoice Ninja is an open-source application developed by Invoice Ninja, featuring features for invoices, quotes, projects, and time tracking. Version 5.13.0 of Invoice Ninja contains a security vulnerability. This vulnerability stems from the project description field bypassing the XSS rejection...

EUVD-2026-13730

DooTask v1.6.27 has a Cross-Site Scripting XSS vulnerability in the /manage/project/ page via the input field projectDesc...

CVE-2026-29828

DooTask v1.6.27 has a Cross-Site Scripting XSS vulnerability in the /manage/project/ page via the input field projectDesc...

CVE-2026-29828

DooTask v1.6.27 has a Cross-Site Scripting XSS vulnerability in the /manage/project/ page via the input field projectDesc...

PT-2026-26643

CVE-2026-29828 DooTask v1.6.27 has a Cross-Site Scripting XSS vulnerability in the /manage/project/id page via the input field projectDesc. https://t.co/IdJyEMWfTe...

CVE-2026-29828

DooTask v1.6.27 has a Cross-Site Scripting XSS vulnerability in the /manage/project/ page via the input field projectDesc...

PYSEC-2025-188

Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for a project member to put JavaScript in name or description fields which would run on project load. This issue has been patched in version 1.5.0...

EUVD-2025-11925

Malicious code in bioql PyPI...

EUVD-2025-29211

Malicious code in bioql PyPI...

EUVD-2024-37379

Malicious code in bioql PyPI...

CVE-2025-52344

Multiple Cross Site Scripting XSS vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fields...

CVE-2025-52344

Multiple Cross Site Scripting XSS vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fields...

CVE-2025-52344

Explorance Blue version 8.1.2 contains multiple Cross-Site Scripting (XSS) vulnerabilities. The root cause is the improper filtering of user-supplied input within the Group name and Project Description input fields. This allows an attacker to inject arbitrary JavaScript code into a user's browser...

CVE-2025-52344: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fields...

CVE-2025-52344

Multiple Cross Site Scripting XSS vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fields...

CVE-2025-52344

Multiple Cross Site Scripting XSS vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fields...

Explorance Blue 安全漏洞

Explorance Blue is a learning experience management software from Explorance Canada. A security vulnerability exists in Explorance Blue version 8.1.2, which stems from the Group name and Project Description input fields not properly filtering input, which could lead to a cross-site scripting atta...

PT-2025-37729

Name of the Vulnerable Software and Affected Versions Explorance Blue version 8.1.2 Description Explorance Blue version 8.1.2 contains multiple Cross Site Scripting XSS vulnerabilities in input fields. These vulnerabilities allow attackers to inject arbitrary JavaScript code into a user’s browser...