17017 matches found
PT-2025-41715
Name of the Vulnerable Software and Affected Versions HCL Unica Platform affected versions not specified Description The HCL Unica Platform is affected by improperly configured security-related HTTP headers. This configuration can result in browsers applying less secure default settings for...
Cross-site Scripting (XSS)
Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to the improper validation of specified type of input. An attacker can execute arbitrary JavaScript...
Cross-site Scripting (XSS)
Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Cross-site Scripting XSS via improper input neutralization in the web page generation in Vega visualizations. An attacker can...
CVE-2025-41089 Reflected Cross-Site Scripting (XSS) in CMS
Reflected Cross-Site Scripting XSS in Xibo CMS v4.1.2 from Xibo Signage, due to a lack of proper validation of user input. To exploit the vulnerability, the attacker must create a template in the 'Templates' section, then add an element that has the 'Configuration Name' field, such as the 'Clock'...
EUVD-2025-33661
The Booking Manager WordPress plugin before 2.1.15 registers a shortcode that deletes bookings and makes that shortcode available to anyone with contributor and above privileges. When a page containing the shortcode is visited, the bookings are deleted...
Web Developer for Chrome 安全漏洞
Web Developer for Chrome is a browser developer extension by Chris Pederick Personal Developer. A security vulnerability exists in Web Developer for Chrome version 0.4.9, which stems from malicious code that generates a domain name and obtains remote scripts via DGA, which could lead to user-leve...
CVE-2025-11416 PHPGurukul Beauty Parlour Management System invoices.php sql injection
A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/invoices.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been released to th...
EUVD-2015-2254
Malware in sbrugna...
EUVD-2016-10080
Malware in sbrugna...
EUVD-2012-0871
Malware in sbrugna...
EUVD-2005-4725
Malware in sbrugna...
EUVD-2007-3333
Malware in sbrugna...
EUVD-2014-0654
Malware in sbrugna...
EUVD-2006-3580
Malware in sbrugna...
EUVD-2008-6064
Malware in sbrugna...
EUVD-2020-29330
Malware in sbrugna...
EUVD-2015-2960
Malware in sbrugna...
EUVD-2017-15399
Malware in sbrugna...