291 matches found
CVE-2025-34264: Improper Neutralization of Input During Web Page Generation
Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/dog/agentId endpoint. When an authenticated user adds or edits Software Watchdog process rules for an agent, the monitored process name is stored in the settings array and...
CVE-2025-34266: Improper Neutralization of Input During Web Page Generation
Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/plugin-config/addins/menus endpoint. When an authenticated user adds or edits an AddIns menu entry, the label and path values are stored in plugin configuration data and lat...
PT-2025-49282
Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/devicegroups/ endpoint. When an authenticated user creates a device group, the name and description values are stored and later rendered in device group listings without...
CVE-2025-62508
Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Citizen from 3.3.0 to 3.9.0 are vulnerable to stored cross-site scripting in the sticky header button message handling. In stickyHeader.js the copyButtonAttributes function assigns innerHTML from a source element’s...
EUVD-2020-28699
Malware in sbrugna...
EUVD-2016-9986
Malware in sbrugna...
EUVD-2021-20368
Malware in sbrugna...
EUVD-2019-6034
Malware in sbrugna...
EUVD-2017-1264
Malware in sbrugna...
EUVD-2022-28159
Malicious code in bioql PyPI...
EUVD-2025-20088
Malicious code in bioql PyPI...
EUVD-2024-3253
Malicious code in bioql PyPI...
EUVD-2022-40560
Malicious code in bioql PyPI...
EUVD-2025-4810
Malicious code in bioql PyPI...
EUVD-2025-5941
Malicious code in bioql PyPI...
EUVD-2022-27955
Malicious code in bioql PyPI...
EUVD-2024-3177
Malicious code in bioql PyPI...
EUVD-2025-4819
Malicious code in bioql PyPI...
EUVD-2024-45596
Malicious code in bioql PyPI...
CVE-2025-8556 Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results
A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange...