CVE-2025-59991

CVE-2025-59991 is a cross-site scripting vulnerability in Juniper Networks Junos Space that allows an attacker to inject scripts into Device Management pages, enabling execution of commands with the victim user’s permissions (potentially admin). Affected: Junos Space versions before 24.1R4. The N...

CVE-2025-59989

CVE-2025-59989 affects Juniper Networks Junos Space prior to version 24.1R4. The issue is an Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) on the Device Discovery page, allowing an attacker to inject script tags which, when viewed by another user, can execute ...

CVE-2025-59988

CVE-2025-59988 involves a cross-site scripting vulnerability in Juniper Networks Junos Space prior to version 24.1R4. The issue allows an attacker to inject script tags on the Generate Report page, which, when visited by another user, can execute commands with the target’s permissions (including ...

CVE-2025-59988 Junos Space: Generate Report page is vulnerable to reflected cross-site script injection

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Generate Report page that, when visited by another user, enables the attacker to execute commands with the target's...

CVE-2025-59987 Junos Space: The arbitrary device search field is vulnerable to reflected cross-site script injection

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the arbitrary device search field that, when visited by another user, enables the attacker to execute commands with the...

CVE-2025-59986 Junos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injection

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the input fields in Model Devices that, when visited by another user, enables the attacker to execute commands with the...

CVE-2025-59984 Junos Space: Global Search is vulnerable to reflected cross-site script injection

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in Global Search that, when visited by another user, enables the attacker to execute commands with the target's permissions,...

CVE-2025-59983

CVE-2025-59983 affects Juniper Networks Junos Space prior to version 24.1R4. The issue is an Improp er Neutralization of Input During Web Page Generation (Cross-site Scripting) that allows an attacker to inject script tags on the Template Definition page; when another user visits that page, the a...

Security update for git

This update for git fixes the following issues: Update to 2.51.0: CVE-2025-27613: arbitrary writable file creation and truncation in Gitk bsc1245938 CVE-2025-27614: arbitrary script execution via repo clonation in gitk bsc1245939 CVE-2025-46835: untrusted repository cloning can lead to arbitrary...

AlmaLinux 10 : git (ALSA-2025:11533)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:11533 advisory. git: Git does not sanitize URLs when asking for credentials interactively CVE-2024-50349 git: Newline confusion in credential helpers can lead to...

PT-2025-41434

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 24.1R4 Description An Improper Neutralization of Input During Web Page Generation issue exists in Juniper Networks Junos Space. This allows an attacker to inject script tags in the Archive Log...

PT-2025-41476

Name of the Vulnerable Software and Affected Versions Newforma Info Exchange NIX affected versions not specified Description Newforma Info Exchange NIX includes a 'Send a File Transfer' feature that allows a remote, authenticated attacker to upload SVG files. These SVG files can contain JavaScrip...

Opencast 跨站脚本漏洞

Opencast is a live video support software for large-scale automated video capture, management and distribution from the Opencast organization. Opencast suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied dat...

CVE-2025-36355

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicious scripts from outside of its control sphere...

Cross-site Scripting (XSS)

Overview double-take is an Unified UI and API for processing and training images for facial recognition Affected versions of this package are vulnerable to Cross-site Scripting XSS via the app.use function in the API component when processing the X-Ingress-Path argument. An attacker can inject an...

EUVD-2020-3411

Malware in sbrugna...

EUVD-2020-11190

Malware in sbrugna...

EUVD-2020-15960

Malware in sbrugna...

EUVD-2010-3431

Malware in sbrugna...

EUVD-2004-1128

Malware in sbrugna...