EUVD-2006-0396

Malware in sbrugna...

EUVD-2020-17384

Malware in sbrugna...

EUVD-2014-1947

Malware in sbrugna...

EUVD-2009-1833

Malware in sbrugna...

CVE-2025-61198

A stored cross-site scripting (XSS) vulnerability exists in Orban broadcast audio processors, specifically affecting Optimod 5950, Optimod 5950HD, Optimod 5750, Optimod 5750HD, Optimod Trio , and versions 1.0.0.33 and 2.5.26 . The root cause is the incorrect handling of malicious payloads within ...

EUVD-2024-55005

Malicious code in bioql PyPI...

EUVD-2021-28579

Malicious code in bioql PyPI...

EUVD-2023-42650

Malicious code in bioql PyPI...

EUVD-2023-45173

Malicious code in bioql PyPI...

NaumenKMS Knowledge Management System Arbitrary JavaScript Execution

The vulnerability of the NaumenKMS knowledge management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...

CVE-2025-28016

A Reflected Cross-Site Scripting XSS vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the fname, lname, and contact parameters...

CVE-2025-28016

A Reflected Cross-Site Scripting XSS vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the fname, lname, and contact parameters...

PERCo-Web Arbitrary JavaScript Execution

The vulnerability of the PERCo-Web access control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...

CVE-2025-57117

A Clickjacking vulnerability exists in Rems' Employee Management System 1.0. This flaw allows remote attackers to execute arbitrary JavaScript on the department.php page by injecting a malicious payload into the Department Name field under Add Department...

PT-2025-37768

Name of the Vulnerable Software and Affected Versions Rems' Employee Management System version 1.0 Description A Clickjacking issue exists that allows remote attackers to execute arbitrary JavaScript. The issue is present on the 'department.php' page and involves injecting a malicious payload int...

CVE-2025-55998

A cross-site scripting XSS vulnerability in Smart Search & Filter Shopify and BigCommerce apps allows a remote attacker to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into several filter parameter...

Linux Distros Unpatched Vulnerability : CVE-2015-5825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple iOS before 9 does not properly restrict the availability of Performance API times, which allows remote attackers to obtain sensitive information...

CVE-2025-55998

A cross-site scripting XSS vulnerability in Smart Search & Filter Shopify and BigCommerce apps allows a remote attacker to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into several filter parameter...

CVE-2025-56432

A cross-site scripting XSS vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-relat...

Linux Distros Unpatched Vulnerability : CVE-2017-5085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Bookmarks in Google Chrome prior to 59 for iOS allowed a remote attacker who convinced the user to perform certain operations to...