EUVD-2025-12632

Malicious code in bioql PyPI...

CVE-2025-4075

A vulnerability was found in VMSMan up to 20250416. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Email with the input " leads to cross site scripting. The attack may be launched remotely. The exploi...

CVE-2025-4075

A vulnerability was found in VMSMan up to 20250416. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Email with the input "alert1 leads to cross site scripting. The attack may be launched remotely. The...

CVE-2025-4075 VMSMan login.php cross site scripting

A vulnerability was found in VMSMan up to 20250416. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Email with the input "alert1 leads to cross site scripting. The attack may be launched remotely. The...

CVE-2025-4075 VMSMan login.php cross site scripting

A vulnerability was found in VMSMan up to 20250416. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Email with the input "alert1 leads to cross site scripting. The attack may be launched remotely. The...

CVE-2025-4075

A vulnerability was found in VMSMan up to 20250416. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Email with the input "alert1 leads to cross site scripting. The attack may be launched remotely. The...

CVE-2025-4075

VMSMan up to 20250416 contains a cross-site scripting vulnerability in /login.php via the Email parameter (input: ">\u003cscript>alert(1)). Exploitation can be remote and the exploit is publicly disclosed. No confirmed fix/version is provided in the sources; one PT Security note suggests re...

CVE-2025-4075: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in VMSMan up to 20250416. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Email with the input " leads to cross site scripting. The attack may be launched remotely. The exploi...

PT-2025-18199 · Vmsman · Vmsman

Name of the Vulnerable Software and Affected Versions: VMSMan up to 20250416 Description: A problem was found in the software. It affects some unknown functionality of the file /login.php. The issue can be exploited by manipulating the Email argument with the input "alert1, leading to cross-site...

VMSMan code injection vulnerability

VMSMan is a remote control and remote scripting solution from VMSMan, Inc. A code injection vulnerability exists in VMSMan 20250416 and prior versions, which stems from improper handling of the parameter Email in the file /login.php, which could lead to a cross-site scripting attack...