3945 matches found
Newforma Project Center Server 安全漏洞
Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. Newforma Project Center suffers from a cross-site scripting...
PT-2025-41424
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 24.1R4 Description An issue exists in Juniper Networks Junos Space that allows an attacker to inject script tags into the Generate Report page. When another user visits this page, the attacker can...
CVE-2025-11442
CVE-2025-11442 affects JhumanJ OpnForm up to version 1.9.3. The vulnerability is a CSRF in an API Endpoint, with remote attack potential. The vendor notes that API calls require Authorization Bearer Tokens, which mitigates classic CSRF, but exploitation could occur if an attacker obtains a JWT vi...
Wapiti Web Application Vulnerability Scanner 3.2.6
Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the binary release...
PT-2025-41256
Name of the Vulnerable Software and Affected Versions Novel-Plus version 5.2.0 Description An authenticated user can inject malicious JavaScript through the replyContent parameter when replying to a book comment via the /book/addCommentReply endpoint. The malicious payload is stored in the databa...
EUVD-2025-33294
SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting XSS in /admin/profile.php via the fname First Name and lname Last Name fields...
CVE-2025-11401
A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected is an unknown function of the file /pages/savecurr.php. This manipulation of the argument currcode causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and ma...
CVE-2025-11312
A vulnerability was detected in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This affects the function findModulePage of the file findModulePage.do. The manipulation of the argument sort results in sql injection. The attack can be launched remotely. The exploit is now public...
EUVD-2013-0953
Malware in sbrugna...
EUVD-2019-13301
Malware in sbrugna...
EUVD-2014-9331
Malware in sbrugna...
EUVD-2012-0308
Malware in sbrugna...
EUVD-2009-4119
Malware in sbrugna...
EUVD-2016-2762
Malware in sbrugna...
EUVD-2008-0920
Malware in sbrugna...
EUVD-2016-6752
Malware in sbrugna...
EUVD-2014-6066
Malware in sbrugna...
EUVD-2017-10766
Malware in sbrugna...