9595 matches found
PT-2025-43214
Name of the Vulnerable Software and Affected Versions ShareBang, Ultimate Social Share Buttons for WordPress versions through 1.4 Description The software contains a flaw related to improper input handling during web page creation, which allows for Reflected Cross-Site Scripting XSS. This means a...
EUVD-2025-35158
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in giSoft Information Technologies City Guide allows Reflected XSS.This issue affects City Guide: before 1.4.45...
Multiple vulnerabilities in desknet's NEO
Overview desknets NEO provided by NEOJAPAN Inc. contains multiple vulnerabilities listed below. Stored cross-site scripting CWE-79 - CVE-2025-24833, CVE-2025-54760, CVE-2025-55072 Reflected cross-site scripting CWE-79 - CVE-2025-52583 Stored cross-site scripting CWE-79 - CVE-2025-54859 Improper...
CVE-2025-62365
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Prior to 25.7.0, there is a reflected-XSS in reportthis function in librenms/includes/functions.php. The reportthis function had improper filtering htmlentities function was incorrectly use in a href environment, which...
CVE-2025-59429
FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...
Exploit for CVE-2025-61456
🛡️ CVE Disclosure: CVE-2025-61456 — Reflected XSS in E-commerc...
CVE-2025-31366
CVE-2025-31366 is a reflected cross-site scripting (XSS) vulnerability (CWE-79) affecting Fortinet FortiOS, FortiProxy, and FortiSASE products. An unauthenticated attacker can trigger XSS via crafted HTTP requests. Affected: FortiOS 7.6.0–7.6.3, 7.4.0–7.4.8, 7.2 all versions, 7.0 all versions, 6....
CVE-2025-62359
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, a Reflected Cross-Site Scripting XSS vulnerability was identified in the /pet/profilepet.php?idpet= endpoint of the WeGIA application. This vulnerability allows attackers to inject...
CVE-2025-11449
The CVE-2025-11449 entry describes a reflected cross-site scripting vulnerability in the ServiceNow AI Platform. The flaw could allow arbitrary code execution in a user’s browser when a person clicks a specially crafted link. Documentation consistently states that ServiceNow has deployed security...
EUVD-2021-10780
Malware in sbrugna...
EUVD-2021-1005
Malware in sbrugna...
EUVD-2021-10786
Malware in sbrugna...
EUVD-2021-10007
Malware in sbrugna...
EUVD-2020-27363
Malware in sbrugna...
EUVD-2021-11995
Malware in sbrugna...
EUVD-2020-14946
Malware in sbrugna...
EUVD-2018-1231
Malware in sbrugna...
EUVD-2018-7550
Malware in sbrugna...