30337 matches found
CVE-2025-55203 Plane Stored XSS in Add Work Item Functionality
Plane is open-source project management software. Prior to version 0.28.0, a stored cross-site scripting XSS vulnerability exists in the descriptionhtml field of Plane. This flaw allows an attacker to inject malicious JavaScript code that is stored and later executed in other users’ browsers. The...
CVE-2025-55203 Plane Stored XSS in Add Work Item Functionality
Plane is open-source project management software. Prior to version 0.28.0, a stored cross-site scripting XSS vulnerability exists in the descriptionhtml field of Plane. This flaw allows an attacker to inject malicious JavaScript code that is stored and later executed in other users’ browsers. The...
CVE-2025-55203
Plane is an open‑source project management tool. A stored XSS vulnerability exists in the description_html field prior to version 0.28.0, where unsanitized/uncleaned input allows attacker‑provided JavaScript to be saved in the database and executed in other users’ browsers. Impacts include potent...
CVE-2025-9012 PHPGurukul Online Shopping Portal Project bill-ship-addresses.php sql injection
A vulnerability was identified in PHPGurukul Online Shopping Portal Project 2.0. This affects an unknown part of the file shopping/bill-ship-addresses.php. The manipulation of the argument billingpincode leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
MAL-2025-6879 Malicious code in @yaqiguo/dnstest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3478ba78740bef836d1172c597de70dda1774f80ed7d9c3b8273dc9fbc9db71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PHPGurukul Online Shopping Portal Project 注入漏洞
Online Shopping Portal Project is an online shopping portal project. Online Shopping Portal Project suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter billingpincode in the file...
PT-2025-34582 · Git · Libwebp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438294044 Crash type: Null-dereference READ Crash state: enc [email protected]...
Malicious code in torrent-quaver-yxr253-project (npm)
The package torrent-quaver-yxr253-project was found to contain malicious code...
Malicious code in coral-yeti-wvi805-project (npm)
The package coral-yeti-wvi805-project was found to contain malicious code...
Malicious code in project-ocupq-honeydew (npm)
The package project-ocupq-honeydew was found to contain malicious code...
Malicious code in zenith-jacket-cvt332-project (npm)
The package zenith-jacket-cvt332-project was found to contain malicious code...
Malicious code in echo-skc-project (npm)
The package echo-skc-project was found to contain malicious code...
Malicious code in yacht-moose-gkg530-project (npm)
The package yacht-moose-gkg530-project was found to contain malicious code...
Malicious code in honey-yacht-ksy900-project (npm)
The package honey-yacht-ksy900-project was found to contain malicious code...
Malicious code in lavender-munq4-1mpil-grove-project (npm)
The package lavender-munq4-1mpil-grove-project was found to contain malicious code...
Malicious code in charlie-5fq-project (npm)
The package charlie-5fq-project was found to contain malicious code...
Malicious code in foxtrot-dc1-project (npm)
The package foxtrot-dc1-project was found to contain malicious code...
Malicious code in moon-opal-btr698-project (npm)
The package moon-opal-btr698-project was found to contain malicious code...