PT-2025-27208 · Hidepost · Hidepost

Name of the Vulnerable Software and Affected Versions: HidePost versions prior to 2.3.8 Description: A Cross-Site Request Forgery CSRF issue in HidePost allows for Reflected XSS. This means an attacker could potentially trick a user into performing unintended actions on the web application...

CVE-2025-52879

In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possible...

CVE-2025-52877

In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible...

CVE-2025-52876

In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible...

Exploit for CVE-2025-0133

CVE-2025-0133 Vulnerability Scanner A Bash-based automated sc...

Moodle 4.4.x < 4.4.8 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is 4.1.x prior to 4.1.18 or 4.3.x prior to 4.3.12 or 4.4.x prior to 4.4.8 or 4.5.x prior to 4.5.4. It is, therefore, affected by multiple vulnerabilities : - Additional checks were required to ensure users can on...

CVE-2025-49126

Visionatrix is an AI Media processing tool using ComfyUI. In versions 1.5.0 to before 2.5.1, the /docs/flows endpoint is vulnerable to a Reflected XSS Cross-Site Scripting attack allowing full takeover of the application and exfiltration of secrets stored in the application. The implementation us...

CVE-2025-49126

Visionatrix is affected by a Reflected XSS in versions 1.5.0–2.5.0 (fixed in 2.5.1) via the "/docs/flows" endpoint. The root cause is the use of FastAPI’s get_swagger_ui_html without encoding or sanitizing user-controlled arguments, which is used to render the swagger docs. The vulnerability enab...

CVE-2025-49126 Visionatrix Vulnerable to Reflected XSS Leading to Exfiltration of Secrets

Visionatrix is an AI Media processing tool using ComfyUI. In versions 1.5.0 to before 2.5.1, the /docs/flows endpoint is vulnerable to a Reflected XSS Cross-Site Scripting attack allowing full takeover of the application and exfiltration of secrets stored in the application. The implementation us...

CVE-2025-49126 Visionatrix Vulnerable to Reflected XSS Leading to Exfiltration of Secrets

Visionatrix is an AI Media processing tool using ComfyUI. In versions 1.5.0 to before 2.5.1, the /docs/flows endpoint is vulnerable to a Reflected XSS Cross-Site Scripting attack allowing full takeover of the application and exfiltration of secrets stored in the application. The implementation us...

CVE-2025-52876

In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible...

CVE-2025-52877

In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible...

CVE-2025-52879

In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possible...

CVE-2025-52879

CVE-2025-52879 affects JetBrains TeamCity prior to 2025.03.3, with a reflected XSS in the NPM Registry integration. The issue is documented across multiple sources (including Red Hat and CNVD/NVD) as a cross-site scripting vulnerability stemming from insufficient input filtering/escaping in the N...

CVE-2025-52879

In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possible...

CVE-2025-52877

In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible...

CVE-2025-52877

CVE-2025-52877 affects JetBrains TeamCity (diskUsageBuildsStats page). Affected: TeamCity versions prior to 2025.03.3. Vulnerability: reflected XSS on the diskUsageBuildsStats page due to insufficient input filtering/escaping. Impact per CVSSv3.1: base score 4.8 (Medium) with Network attack vecto...

CVE-2025-52876

In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible...

CVE-2025-52877

In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible...

CVE-2025-52876

CVE-2025-52876 refers to a reflected cross-site scripting (XSS) vulnerability in JetBrains TeamCity’s favoriteIcon page. Affected product: JetBrains TeamCity (versions prior to 2025.03.3). Root cause: lack of proper filtering/escaping of user-supplied data on the favoriteIcon page, enabling an at...