8486 matches found
CVE-2025-10228
Session Fixation vulnerability in Rolantis Information Technologies Agentis allows Session Hijacking. This issue affects Agentis: before 4.44...
CVE-2025-10228 Session Hijacking in Rolantis Information Technologies' Agentis
Session Fixation vulnerability in Rolantis Information Technologies Agentis allows Session Hijacking. This issue affects Agentis: before 4.44...
CVE-2025-10228
CVE-2025-10228 affects Rolantis Information Technologies Agentis prior to version 4.44. The issue is a session fixation flaw that can lead to session hijacking, enabling an attacker to manipulate or set a user session identifier potentially before authentication. This vulnerability is reported wi...
CVE-2025-10228 Session Hijacking in Rolantis Information Technologies' Agentis
Session Fixation vulnerability in Rolantis Information Technologies Agentis allows Session Hijacking. This issue affects Agentis: before 4.44...
EUVD-2025-34152
Session Fixation vulnerability in Rolantis Information Technologies Agentis allows Session Hijacking.This issue affects Agentis: before 4.44...
CVE-2025-10228
Session Fixation vulnerability in Rolantis Information Technologies Agentis allows Session Hijacking. This issue affects Agentis: before 4.44...
FreePBX 跨站脚本漏洞
FreePBX formerly known as Asterisk Management Portal is a set of tools from the FreePBX project for configuring Asterisk IP telephony system through a GUI web-based graphical interface. A cross-site scripting vulnerability exists in FreePBX 16 versions prior to 16.0.68.39 and FreePBX 17 versions...
Rolantis Agentis 授权问题漏洞
Rolantis Agentis is a software for enterprise information management and automated processing from the Turkish company Rolantis. An authorization issue vulnerability exists in Rolantis Agentis versions prior to 4.44 that stems from a session fixation issue that could lead to session hijacking...
PT-2025-41864
Name of the Vulnerable Software and Affected Versions Rolantis Information Technologies Agentis versions prior to 4.44 Description A session fixation issue exists in Rolantis Information Technologies Agentis. This allows an attacker to set or manipulate a user's session identifier before...
CVE-2025-59429: Improper Neutralization of Input During Web Page Generation
FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...
CVE-2025-10228: Session Fixation
Session Fixation vulnerability in Rolantis Information Technologies Agentis allows Session Hijacking. This issue affects Agentis: before 4.44...
CVE-2025-25017
A Cross-Site Scripting XSS vulnerability in Kibana’s Vega visualization engine. It results from improper input validation in Vega visualization specifications, allowing attackers to inject malicious JavaScript. Successful exploitation could lead to session hijacking, data theft, or privilege...
GHSA-29MF-W486-V3VC Bagisto is vulnerable to XSS through Admin Panel's product creation path
An authenticated stored XSS vulnerability exists in the Bagisto 2.3.6 admin panel's product creation path, allowing an attacker to upload a crafted SVG file containing malicious JavaScript code. This vulnerability can be exploited by an authenticated admin user to execute arbitrary JavaScript in...
Cross-site Scripting (XSS)
Overview bagisto/bagisto is a hand tailored E-Commerce framework designed on some opensource technologies such as Laravel a PHP framework, Vue.js a progressive Javascript framework. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Admin Panel. An attacker can...
CVE-2025-61319
ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting XSS vulnerability in the Vulnerabilities module. When scanning a target with an XSS payload, the unsanitized payload is rendered in the ReNgine web UI, resulting in arbitrary JavaScript execution in the victim's browser. This can b...
CVE-2025-60880: Improper Neutralization of Input During Web Page Generation
An authenticated stored XSS vulnerability exists in the Bagisto 2.3.6 admin panel's product creation path, allowing an attacker to upload a crafted SVG file containing malicious JavaScript code. This vulnerability can be exploited by an authenticated admin user to execute arbitrary JavaScript in...
CVE-2025-61999
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to upload JavaScript or other content embedded in an SVG image used as a logo. Injected content is executed in the context of other users when they view affected pages. Successful exploitation allows the administrative user to perfo...
EUVD-2010-3469
Malware in sbrugna...