The vulnerability of the Special:ApiSandbox component of the software for implementing the MediaWiki hypertext environment allows a attacker to perform XSS attacks.

The vulnerability of the Special:ApiSandbox component of the MediaWiki software environment relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the Naver Whale web browser arises from the lack of measures taken to protect the structure of web pages. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Naver Whale web browser exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a special...

The vulnerability of the MultimediaViewer component of the software, which is used to implement the hypertext environment of MediaWiki, allows a attacker to carry out XSS attacks.

The vulnerability of the MultimediaViewer component of the MediaWiki software framework relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

0-DAY

0-DAYzero-day !Repo Statushttps://img.shields.io/badge/...

OESA-2025-2482 poppler security update

is a PDF rendering library. Security Fixes: Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata such as GTSPDFEVersion of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in...

EUVD-2025-34779

An integer overflow vulnerability exists in the QuickJS regular expression engine libregexp due to an inconsistent representation of the bytecode buffer size. The regular expression bytecode is stored in a DynBuf structure, which correctly uses a $\textsize\textt$ an unsigned type, typically...

UBUNTU-CVE-2025-39992

In the Linux kernel, the following vulnerability has been resolved: mm: swap: check for stable address space before operating on the VMA It is possible to hit a zero entry while traversing the vmas in unusemm called from swapoff path and accessing it causes the OOPS: Unable to handle kernel NULL...

The vulnerability of the Nagios XI monitoring tool, related to the lack of protective measures for the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the Nagios XI monitoring tool is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks from a remote location...

The vulnerability of the Ivanti Endpoint Manager software management tool lies in the lack of security measures for the SQL query structure, allowing attackers to read arbitrary data.

The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...

The vulnerability of the Ivanti Endpoint Manager software management tool lies in the lack of security measures for the SQL query structure, allowing attackers to read arbitrary data.

The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...

The vulnerability of the eProcurement component of the SAP S/4HANA Finance software allows a attacker to execute XSS attacks.

The vulnerability of the eProcurement component of the SAP S/4HANA Finance financial management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

The vulnerability of the Ivanti Endpoint Manager software management tool lies in the lack of security measures for the SQL query structure, allowing attackers to read arbitrary data.

The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...

The vulnerability of the Ivanti Endpoint Manager software management tool lies in the lack of security measures for the SQL query structure, allowing attackers to read arbitrary data.

The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...

The vulnerability of the Ivanti Endpoint Manager software management tool lies in the lack of security measures for the SQL query structure, allowing attackers to read arbitrary data.

The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...

CVE-2025-2529: Improper Handling of Syntactically Invalid Structure

Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application using Ehcache utilizes keys sourced from malicious external parties in an unfiltered/unsalted way...

Improper Handling of Syntactically Invalid Structure

Overview github.com/cometbft/cometbft/consensus is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine - written in any programming language - and securely replicates it on many machines. Affected versions of this package are vulnerable to Improper Handling of...

ROS-20251014-05

A vulnerability in the interface of the Grafana monitoring and surveillance platform is related to the failure to take measures to protect the web page structure when processing the /swagger endpoint. web page structure when processing the /swagger endpoint. Exploitation of the vulnerability coul...

[SECURITY] Fedora 41 Update: valkey-8.0.6-1.fc41

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

The vulnerability of Juniper Networks’ Junos Space network resource management platform, related to the lack of protection for the website structure, allows a hacker to execute arbitrary code with administrator privileges.

The vulnerability of the Juniper Networks Junos Space network resource management platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with administrator privileges...

The vulnerability of AndSoft e-TMS software management system for transportation transportations lies in the improper restriction of path names to the catalog, without taking measures to protect the website structure. This allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of AndSoft e-TMS software management system for transportation transport is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...