5584 matches found
PT-2026-22650
Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description A memory corruption issue exists due to the addition of user-supplied data without proper buffer space validation. This can lead to unexpected behavior or potentially allow an attacker to control program...
CVE-2026-27013 Fabric.js Affected by Stored XSS via SVG Export
Fabric.js is a Javascript HTML5 canvas library. Prior to version 7.2.0, Fabric.js applies escapeXml to text content during SVG export src/shapes/Text/TextSVGExportMixin.ts:186 but fails to apply it to other user-controlled string values that are interpolated into SVG attribute markup. When...
WordPress Gotham Block Extra Light plugin cross-site scripting vulnerability
The WordPress Gotham Block Extra Light plugin is a tool for detecting if ad blocking software such as AdBlock is enabled in a visitor's browser. The WordPress Gotham Block Extra Light plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective...
CVE-2019-11574
An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...
Soda PDF Desktop Out-of-Bounds Read Vulnerability
Soda PDF Desktop is a professional PDF processing software that integrates reading, editing, creating, converting and managing PDF documents. Soda PDF Desktop has an out-of-bounds read vulnerability that stems from a lack of validation of user-supplied data when parsing PDF files, which can be...
CVE-2025-14935: Heap-based Buffer Overflow
NSF Unidata NetCDF-C Dimension Name Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target...
WordPress iframe plugin cross-site scripting vulnerability
The WordPress iframe plugin is a tool for embedding iFrame content in WordPress websites, allowing users to embed external web pages, videos, forms, etc. into their pages. WordPress iframe plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective...
WordPress Captivate Sync plugin deserialization vulnerability
WordPress Captivate Sync plugin is a WordPress plugin developed by Captivate, which belongs to RebelBaseMedia's products and is mainly used to simplify the Podcast management process. WordPress Captivate Sync plugin suffers from a deserialization vulnerability that stems from unsafe deserializati...
PT-2025-43354
Name of the Vulnerable Software and Affected Versions Themepoints Tab Ultimate versions through 1.8 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially allowing for Cross-site Scripting XSS. This could allow an attacker ...
PT-2025-42600
Name of the Vulnerable Software and Affected Versions Memberlite Shortcodes versions through 1.4.1 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, which could lead to Cross-site Scripting XSS. This allows for the injection of...
EUVD-2017-15597
Malware in sbrugna...
EUVD-2017-15593
Malware in sbrugna...
EUVD-2017-15547
Malware in sbrugna...
EUVD-2017-15543
Malware in sbrugna...
EUVD-2017-15448
Malware in sbrugna...
EUVD-2021-18252
Malware in sbrugna...
EUVD-2017-16281
Malware in sbrugna...
EUVD-2017-15016
Malware in sbrugna...