93 matches found
CVE-2026-3743
YiFang CMS 2.0.5 contains an XSS flaw in the update path for file app/db/admin/D_singlePageGroup.php. Manipulating the Name argument enables cross-site scripting, and the attack can be launched remotely. Public exploit and details exist; vendor was contacted but did not respond. No remediation de...
CVE-2026-3742 YiFang CMS D_singlePage.php update cross site scripting
A vulnerability was detected in YiFang CMS 2.0.5. The impacted element is the function update of the file app/db/admin/DsinglePage.php. Performing a manipulation of the argument Title results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and ma...
CVE-2026-3742
Affected software: YiFang CMS 2.0.5. The vulnerability resides in the function update of the file app/db/admin/D_singlePage.php where manipulating the argument Title triggers cross-site scripting. The exploit is publicly available and can be initiated remotely. Exploit code maturity is reported a...
CVE-2026-24801 A Potential SPA-vulnerability in Ralim/IronOS
Vulnerability in Ralim IronOS source/Core/BSP/Pinecilv2/blmcusdk/components/ble/blestack/common/tinycrypt/source modules. This vulnerability is associated with program files eccdsa.C. This issue affects IronOS: before v2.23-rc3...
The vulnerability of the template compiler for Angular, which is used in application and single-page application development platforms, allows attackers to perform cross-site scripting attacks.
The vulnerability of template compilers used in Angular applications and single-page application development frameworks is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks remotely...
EUVD-2019-5464
Malware in sbrugna...
EUVD-2018-0274
Malware in sbrugna...
EUVD-2022-6711
Malicious code in bioql PyPI...
EUVD-2022-7072
Malicious code in bioql PyPI...
EUVD-2025-26974
Malicious code in bioql PyPI...
Relative Path Traversal
Overview vite is a Native-ESM powered web dev build tool Affected versions of this package are vulnerable to Relative Path Traversal via improper enforcement of server.fs settings. An attacker can access arbitrary HTML files on the server by sending crafted requests to the preview server. Note:...
CVE-2025-58752 Vite's `server.fs` settings were not applied to HTML files
Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, any HTML files on the machine were served regardless of the server.fs settings. Only apps that explicitly expose the Vite dev server to the network using --host or server.host config option and...
CVE-2025-58804
Cross-Site Request Forgery CSRF vulnerability in brijrajs WooCommerce Single Page Checkout woo-single-page-checkout allows Cross Site Request Forgery.This issue affects WooCommerce Single Page Checkout: from n/a through = 1.2.7...
CVE-2025-58804
Cross-Site Request Forgery CSRF vulnerability in brijrajs WooCommerce Single Page Checkout woo-single-page-checkout allows Cross Site Request Forgery.This issue affects WooCommerce Single Page Checkout: from n/a through = 1.2.7...
CVE-2025-58804 WordPress WooCommerce Single Page Checkout Plugin <= 1.2.7 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in brijrajs WooCommerce Single Page Checkout woo-single-page-checkout allows Cross Site Request Forgery.This issue affects WooCommerce Single Page Checkout: from n/a through = 1.2.7...
CVE-2025-58804 WordPress WooCommerce Single Page Checkout Plugin <= 1.2.7 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in brijrajs WooCommerce Single Page Checkout woo-single-page-checkout allows Cross Site Request Forgery.This issue affects WooCommerce Single Page Checkout: from n/a through = 1.2.7...
CVE-2025-58804
CVE-2025-58804 : CSRF in WordPress plugin WooCommerce Single Page Checkout (versions up to 1.2.7) allows cross-site requests by authenticated users. CVSS 3.1 base score 4.3 (Medium). Affected: WooCommerce Single Page Checkout. Impact : potential unauthorized actions on behalf of users. Remediatio...
WordPress WooCommerce Single Page Checkout Plugin <= 1.2.7 - Cross Site Request Forgery (CSRF) Vulnerability
Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WooCommerce Single Page Checkout versions = 1.2.7...
PT-2025-36143
Name of the Vulnerable Software and Affected Versions: brijrajs WooCommerce Single Page Checkout versions through 1.2.7 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users. Recommendations: Upda...