1764 matches found
CVE-2025-11336 Four-Faith Water Conservancy Informatization Platform download.do;otherlogout.do path traversal
A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. Affected by this issue is some unknown functionality of the file /stAlarmConfigure/index.do/../../aloneReport/download.do;otherlogout.do. Such manipulation of the argument fileName leads...
CVE-2025-59830
Rack is a modular Ruby web server interface. Prior to version 2.2.18, Rack::QueryParser enforces its paramslimit only for parameters separated by &, while still splitting on both & and ;. As a result, attackers could use ; separators to bypass the parameter count limit and submit more parameters...
CVE-2025-8917 Path Traversal Leading to Remote Code Execution in allegroai/clearml
A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the safeextract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical fil...
CVE-2025-9332
The Interactive Human Anatomy with Clickable Body Parts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...
CVE-2025-61597
Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...
EUVD-2025-32428
Minecraft RCON Terminal is a VS Code extension that streamlines Minecraft server management. Versions 0.1.0 through 2.0.6 stores passwords using VS Code's configuration API which writes to settings.json in plaintext. This issue is fixed in version 2.1.0...
EUVD-2025-26977
Malicious code in bioql PyPI...
EUVD-2022-41785
Malicious code in bioql PyPI...
EUVD-2025-29209
Malicious code in bioql PyPI...
EUVD-2023-53407
Malicious code in bioql PyPI...
EUVD-2025-31050
Malicious code in bioql PyPI...
EUVD-2025-29766
Malicious code in bioql PyPI...
EUVD-2025-31717
Malicious code in bioql PyPI...
EUVD-2025-27696
Malicious code in bioql PyPI...
EUVD-2025-28694
Malicious code in bioql PyPI...
EUVD-2025-27656
Malicious code in bioql PyPI...
EUVD-2025-29751
Malicious code in bioql PyPI...
EUVD-2021-28047
Malicious code in bioql PyPI...