6505 matches found
WEB-APPLICATION-VULNERABILITY-SCANNER
WEB-APPLICATION-VULNERABILITY-SCANNER This task focuses on dev...
CVE-2025-61644
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Rcfilters/ui/WatchlistTopSectionWidget.Js. This issue affects MediaWiki: from befo...
openclaw-security-quiz
🔒 Security & Best Practices Quiz A mobile-friendly quiz app w...
CVE-2025-61644
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Rcfilters/ui/WatchlistTopSectionWidget.Js. This issue affects MediaWiki: from befo...
CVE-2025-61644
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Rcfilters/ui/WatchlistTopSectionWidget.Js. This issue affects MediaWiki: from befo...
CVE-2025-61644 i18n XSS through Special:Watchlist
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Rcfilters/ui/WatchlistTopSectionWidget.Js. This issue affects MediaWiki: from befo...
CVE-2025-61644
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Rcfilters/ui/WatchlistTopSectionWidget.Js. This issue affects MediaWiki: from befo...
CVE-2025-61644
CVE-2025-61644 is an XSS vulnerability in Wikimedia Foundation MediaWiki, tied to the client-side file resources/src/mediawiki.Rcfilters/ui/WatchlistTopSectionWidget.Js. The issue arises from improper neutralization of input during web page generation, affecting MediaWiki instances: from before f...
WordPress Royal Elementor Addons and Templates plugin <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top Widget vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Back to Top Widget vulnerability discovered by wesley wcraft in WordPress Plugin Royal Elementor Addons versions = 1.3.975...
BIT-DISCOURSE-2025-69218 Discourse moderators can access admin-only reports exposing private upload URLs
Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, moderators can access the topuploads admin report which should be restricted to admins only. This report displays direct URLs to all uploaded files on the site, including sensitive...
PT-2026-5732
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Rcfilters/ui/WatchlistTopSectionWidget.Js. This issue affects MediaWiki: from befo...
CVE-2025-61726 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-iam, bank-vaults, git-credential-oauth, cloud-provider-aws, crossplane-provider-aws-cloudwatchlogs, azure-service-operator, sops, gostatsd, rancher-machine, stakater-reloader, bento, mountpoint-s3-csi-driver, kube-vip-cloud-provider,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-iam, bank-vaults, git-credential-oauth, cloud-provider-aws, crossplane-provider-aws-cloudwatchlogs, azure-service-operator, sops, gostatsd, rabbitmq-default-user-credential-updater, rancher-machine, stakater-reloader, bento,...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: cloud-provider-aws, crossplane-provider-aws-cloudwatchlogs, azure-service-operator, mountpoint-s3-csi-driver, nri-couchbase, kubernetes-replicator, timescaledb-tune, knative-operator, ctop, ytt, falco-no-driver, chart-testing, spire-server, k3s, ghaudit,...
GHSA-CM6P-QC7V-M3JW vulnerabilities
Vulnerabilities for packages: cloud-provider-aws, crossplane-provider-aws-cloudwatchlogs, azure-service-operator, mountpoint-s3-csi-driver, nri-couchbase, kubernetes-replicator, timescaledb-tune, knative-operator, ctop, ytt, chart-testing, spire-server, k3s, ghaudit, doppler-kubernetes-operator,...
GHSA-GM9R-Q53W-2GH4 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-iam, bank-vaults, git-credential-oauth, cloud-provider-aws, crossplane-provider-aws-cloudwatchlogs, azure-service-operator, sops, gostatsd, rancher-machine, stakater-reloader, bento, mountpoint-s3-csi-driver, kube-vip-cloud-provider,...
CVE-2025-61730 vulnerabilities
Vulnerabilities for packages: cert-manager-istio-csr-fips, authservice, helm-diff-fips, kube-logging-logging-operator, mig-parted-fips, neuvector, cilium-envoy-fips, goreleaser, influxd, skaffold-fips, terraform, cloudbeat-fips, crossplane-provider-sql, kustomize-fips, sqlexporter-fips, kuma,...
GHSA-GR56-3GP6-6GMJ vulnerabilities
Vulnerabilities for packages: cert-manager-istio-csr-fips, authservice, helm-diff-fips, kube-logging-logging-operator, mig-parted-fips, neuvector, cilium-envoy-fips, goreleaser, influxd, skaffold-fips, terraform, cloudbeat-fips, crossplane-provider-sql, kustomize-fips, sqlexporter-fips, kuma,...
CVE-2025-68119 vulnerabilities
Vulnerabilities for packages: cert-manager-istio-csr-fips, authservice, helm-diff-fips, kube-logging-logging-operator, mig-parted-fips, protoc-gen-go-grpc, neuvector, goreleaser, influxd, skaffold-fips, terraform, cloudbeat-fips, crossplane-provider-sql, kustomize-fips, nats-server-config-reloade...
GHSA-XVQR-69V8-F3GV vulnerabilities
Vulnerabilities for packages: cert-manager-istio-csr-fips, authservice, helm-diff-fips, kube-logging-logging-operator, mig-parted-fips, protoc-gen-go-grpc, neuvector, cilium-envoy-fips, goreleaser, influxd, skaffold-fips, terraform, cloudbeat-fips, crossplane-provider-sql, kustomize-fips,...