148 matches found
EUVD-2025-201432
Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/plugin-config/addins/menus endpoint. When an authenticated user adds or edits an AddIns menu entry, the label and path values are stored in plugin configuration data and lat...
EUVD-2025-201434
Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/devices/name/agentid endpoint. When an authenticated user renames a device, the newname value is stored and later rendered in device listings or detail views without proper...
CVE-2025-34258 Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicemap/plan
Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/devicemap/plan endpoint. When an authenticated user adds an area to a map entry, the name parameter is stored and later rendered in the map list without HTML sanitization. A...
CVE-2025-34257
The CVE-2025-34257 entry concerns Advantech WISE-DeviceOn Server (versions prior to 5.4). A stored XSS exists in the /rmm/v1/action/defined endpoint: when an authenticated user creates a task, the defined_name value is stored and later rendered in the Overview page without HTML sanitization. The ...
PT-2025-49282
Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/devicegroups/ endpoint. When an authenticated user creates a device group, the name and description values are stored and later rendered in device group listings without...
CVE-2025-62508
Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Citizen from 3.3.0 to 3.9.0 are vulnerable to stored cross-site scripting in the sticky header button message handling. In stickyHeader.js the copyButtonAttributes function assigns innerHTML from a source element’s...
EUVD-2021-20368
Malware in sbrugna...
EUVD-2020-28699
Malware in sbrugna...
EUVD-2016-9986
Malware in sbrugna...
EUVD-2017-1264
Malware in sbrugna...
EUVD-2019-6034
Malware in sbrugna...
EUVD-2022-28159
Malicious code in bioql PyPI...
EUVD-2022-27955
Malicious code in bioql PyPI...
EUVD-2025-4810
Malicious code in bioql PyPI...
EUVD-2022-40560
Malicious code in bioql PyPI...
EUVD-2024-3177
Malicious code in bioql PyPI...
EUVD-2024-45596
Malicious code in bioql PyPI...
EUVD-2024-3253
Malicious code in bioql PyPI...