483 matches found
CVE-2021-47738
CSZ CMS 1.2.7 contains a persistent cross-site scripting vulnerability that allows unauthorized users to embed malicious JavaScript in private messages. Attackers can send messages with script payloads in the user-agent header, which will execute when an admin views the message in the backend...
CVE-2021-47738 CSZ CMS 1.2.7 Persistent Cross-Site Scripting via Private Messaging
CSZ CMS 1.2.7 contains a persistent cross-site scripting vulnerability that allows unauthorized users to embed malicious JavaScript in private messages. Attackers can send messages with script payloads in the user-agent header, which will execute when an admin views the message in the backend...
CVE-2021-47738 CSZ CMS 1.2.7 Persistent Cross-Site Scripting via Private Messaging
CSZ CMS 1.2.7 contains a persistent cross-site scripting vulnerability that allows unauthorized users to embed malicious JavaScript in private messages. Attackers can send messages with script payloads in the user-agent header, which will execute when an admin views the message in the backend...
PT-2025-52838
Name of the Vulnerable Software and Affected Versions CSZ CMS version 1.2.7 Description The software contains a persistent cross-site scripting issue that permits unauthorized users to inject malicious JavaScript into private messages. An attacker can send messages containing script payloads with...
The vulnerability of the AI application scaling framework and Python Ray, related to the manipulation of inter-site requests, allows a perpetrator to execute arbitrary code.
The vulnerability of the AI application scaling framework and Python Ray is related to the manipulation of cross-site requests during the processing of the User-Agent header. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through browsers like Firefox and Safari...
PT-2025-48198
Name of the Vulnerable Software and Affected Versions Ray versions prior to 2.52.0 Description Ray is an AI compute engine that lacks authentication on critical API endpoints, specifically '/api/jobs' and '/api/job agent/jobs/'. This allows remote code execution RCE via a DNS rebinding attack...
Cross-site Scripting (XSS)
s-cart/core and gp247/core are vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper sanitization of the User-Agent header in the Admin Log Viewer, which allows an attacker to inject malicious scripts that execute in an administrator’s browser when viewing the security log...
EUVD-2008-6607
Malware in sbrugna...
EUVD-2014-6066
Malware in sbrugna...
EUVD-2011-3258
Malware in sbrugna...
EUVD-2006-4439
Malware in sbrugna...
EUVD-2003-1577
Malware in sbrugna...
EUVD-2006-5212
Malware in sbrugna...
EUVD-2004-1723
Malware in sbrugna...
EUVD-2003-1576
Malware in sbrugna...
EUVD-2015-3011
Malware in sbrugna...
EUVD-2015-9270
Malware in sbrugna...
EUVD-2008-7207
Malware in sbrugna...