357 matches found
EUVD-2023-55485
Malicious code in bioql PyPI...
EUVD-2023-34989
Malicious code in bioql PyPI...
EUVD-2022-2539
Malicious code in bioql PyPI...
EUVD-2024-1596
Malicious code in bioql PyPI...
EUVD-2023-3032
Malicious code in bioql PyPI...
CVE-2024-6429
A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Under certain conditions, error messages are passed through URL parameters without validation, allowing malicious actors to inject arbitrary content into the UI. By exploiting this...
Vaadin 安全漏洞
Vaadin is an open source platform for web application development from Vaadin Open Source.The Vaadin platform consists of a set of web components, a Java web framework, and a set of tools and application launchers. A security vulnerability exists in Vaadin, which stems from an upload validation...
The vulnerability of the Splunk Web platform for operational analysis in Splunk Enterprise allows a perpetrator to trigger a service failure.
The vulnerability of the Splunk Enterprise operational analytics web platform’s Splunk component is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
The vulnerability of the Splunk Web platform for operational analysis in Splunk Enterprise allows a perpetrator to trigger a service failure.
The vulnerability of the Splunk Enterprise operational analytics web platform’s component is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
Malicious code in @fmcc-web-platform/platform-experience-lib (npm)
The package @fmcc-web-platform/platform-experience-lib was found to contain malicious code...
Malicious code in @fmcc-web-platform/react-components (npm)
The package @fmcc-web-platform/react-components was found to contain malicious code...
Malicious code in @amber-team/web-platform-utils (npm)
The package @amber-team/web-platform-utils was found to contain malicious code...
MAL-2025-7077 Malicious code in @amber-team/web-platform-utils (npm)
The package @amber-team/web-platform-utils was found to contain malicious code...
MAL-2025-7938 Malicious code in @fmcc-web-platform/react-components (npm)
The package @fmcc-web-platform/react-components was found to contain malicious code...
The vulnerability of the NotificationDisplayerClass class in the XWiki platform, a platform for creating collaborative web applications. The XWiki platform allows attackers to perform XSS attacks.
The vulnerability of the NotificationDisplayerClass class in the XWiki platform, a platform for creating collaborative web applications, is related to the absence of warnings about dangerous actions when loading edited objects. Exploiting this vulnerability could allow attackers to perform XSS...
The vulnerability of the Cisco Webex web conferencing platform, which exists due to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.
The vulnerability of the Cisco Webex web conferencing platform exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
CVE-2025-4636
Due to excessive privileges granted to the web user running the airpointer web platform, a malicious actor that gains control of the this user would be able to privilege escalate to the root user...
CVE-2025-4636
CVE-2025-4636 concerns local privilege escalation in the Airpointer web platform. Multiple connected sources describe that excessive privileges granted to the web user allow a user-space compromise to escalate to root if an attacker gains control of that account. Documents consistently indicate t...
CVE-2025-4636 Local Privilege Escalation
Due to excessive privileges granted to the web user running the airpointer web platform, a malicious actor that gains control of the this user would be able to privilege escalate to the root user...
CVE-2025-4636: Improper Privilege Management
Due to excessive privileges granted to the web user running the airpointer web platform, a malicious actor that gains control of the this user would be able to privilege escalate to the root user...