CVE-2025-62424

ClipBucket is a web-based video-sharing platform. In ClipBucket version 5.5.2 - 146 and earlier, the /adminarea/templateeditor.php endpoint is vulnerable to path traversal. The validation of the file-loading path is inadequate, allowing authenticated administrators to read and write arbitrary fil...

EUVD-2018-8231

Malware in sbrugna...

EUVD-2023-3032

Malicious code in bioql PyPI...

EUVD-2024-1596

Malicious code in bioql PyPI...

EUVD-2022-2539

Malicious code in bioql PyPI...

EUVD-2023-55485

Malicious code in bioql PyPI...

EUVD-2023-34989

Malicious code in bioql PyPI...

CVE-2024-6429

A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Under certain conditions, error messages are passed through URL parameters without validation, allowing malicious actors to inject arbitrary content into the UI. By exploiting this...

Vaadin 安全漏洞

Vaadin is an open source platform for web application development from Vaadin Open Source.The Vaadin platform consists of a set of web components, a Java web framework, and a set of tools and application launchers. A security vulnerability exists in Vaadin, which stems from an upload validation...

Malicious code in @amber-team/web-platform-utils (npm)

The package @amber-team/web-platform-utils was found to contain malicious code...

MAL-2025-7938 Malicious code in @fmcc-web-platform/react-components (npm)

The package @fmcc-web-platform/react-components was found to contain malicious code...

Malicious code in @fmcc-web-platform/platform-experience-lib (npm)

The package @fmcc-web-platform/platform-experience-lib was found to contain malicious code...

Malicious code in @fmcc-web-platform/react-components (npm)

The package @fmcc-web-platform/react-components was found to contain malicious code...

MAL-2025-7077 Malicious code in @amber-team/web-platform-utils (npm)

The package @amber-team/web-platform-utils was found to contain malicious code...

The vulnerability of the NotificationDisplayerClass class in the XWiki platform, a platform for creating collaborative web applications. The XWiki platform allows attackers to perform XSS attacks.

The vulnerability of the NotificationDisplayerClass class in the XWiki platform, a platform for creating collaborative web applications, is related to the absence of warnings about dangerous actions when loading edited objects. Exploiting this vulnerability could allow attackers to perform XSS...

The vulnerability of the Cisco Webex web conferencing platform, which exists due to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the Cisco Webex web conferencing platform exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CVE-2025-4636

Due to excessive privileges granted to the web user running the airpointer web platform, a malicious actor that gains control of the this user would be able to privilege escalate to the root user...

CVE-2025-4636

CVE-2025-4636 concerns local privilege escalation in the Airpointer web platform. Multiple connected sources describe that excessive privileges granted to the web user allow a user-space compromise to escalate to root if an attacker gains control of that account. Documents consistently indicate t...

CVE-2025-4636 Local Privilege Escalation

Due to excessive privileges granted to the web user running the airpointer web platform, a malicious actor that gains control of the this user would be able to privilege escalate to the root user...

PT-2025-23273 · Unknown · Airpointer Web Platform

Name of the Vulnerable Software and Affected Versions: Airpointer web platform affected versions not specified Description: The issue arises from excessive privileges granted to the web user running the Airpointer web platform. This allows a malicious actor who gains control of this user to...