CVE-2019-25659 ASPRunner Professional 6.0.766 Local Buffer Overflow DoS

ASPRunner Professional 6.0.766 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long project name. Attackers can paste 180 or more characters into the Project name field during project creation to trigger an application...

Xlinesoft ASPRunner Professional buffer error vulnerability

Xlinesoft ASPRunner Professional is a database-driven web application development tool provided by Xlinesoft Corporation in the United States. Version 6.0.766 of Xlinesoft ASPRunner Professional contains a buffer overflow vulnerability. This vulnerability stems from a local buffer overflow in the...

CVE-2019-25659: Out-of-bounds Write

ASPRunner Professional 6.0.766 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long project name. Attackers can paste 180 or more characters into the Project name field during project creation to trigger an application...

EUVD-2013-7035

Malware in sbrugna...

EUVD-2023-50690

Malicious code in bioql PyPI...

CVE-2025-34157

CVE-2025-34157 concerns Coolify. A stored XSS in the project-creation workflow affects versions prior to 4.0.0-beta.420.6. An authenticated user with low privileges can craft a project name containing JavaScript, which when an administrator deletes the project executes in the admin context, enabl...

CVE-2025-34157 Coolify Stored Cross-Site Scripting (XSS) in Project Name Field

Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting XSS attack in the project creation workflow. An authenticated user with low privileges can create a project with a maliciously crafted name containing embedded JavaScript. When an administrator attempts to...

CVE-2024-56314

REDCap versions prior to 15.0.0 (specifically through 14.9.6 ) are susceptible to a stored cross-site scripting (XSS) vulnerability in the Project name field. The root cause is the system's failure to effectively neutralize input content in this field, allowing authenticated users to inject malic...

CVE-2023-46475: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting vulnerability was discovered in ZenTao 18.3 where a user can create a project, and in the name field of the project, they can inject malicious JavaScript code...

PT-2023-30041

Name of the Vulnerable Software and Affected Versions ZenTao version 18.3 Description A Stored Cross-Site Scripting issue was discovered where a user can create a project and inject malicious JavaScript code in the project's name field. Recommendations For ZenTao version 18.3, consider restrictin...

Akaunting security vulnerabilities

Akaunting is a free, open source online accounting software designed for small businesses and freelancers. A CSV injection vulnerability exists in the project name field of the export function in Akaunting. An attacker can exploit this vulnerability to inject arbitrary code into the name paramete...

CVE-2013-7257

Cross-site scripting XSS vulnerability in Codiad 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the Project Name field...

CVE-2013-7257

Cross-site scripting XSS vulnerability in Codiad 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the Project Name field...

PT-2014-3310

Name of the Vulnerable Software and Affected Versions Codiad version 2.0.7 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Project Name field. This enables attackers to execute malicious scripts on the client-side, potentially...

CVE-2013-7257: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Codiad 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the Project Name field...