1193 matches found
CVE-2025-67712 HTML injection issue in ArcGIS Web App Builder
There is an HTML injection issue in Esri ArcGIS Web AppBuilder developer edition versions prior to 2.30 that allows a remote, unauthenticated attacker to potentially entice a user to click a link that causes arbitrary HTML to render in a victim's browser. There is no evidence of JavaScript...
Cross-site Scripting (XSS)
Overview Kentico.Xperience.AspNetCore.WebApp is an assemblies and content items required to integrate Kentico Xperience into ASP.NET Core applications. Affected versions of this package are vulnerable to Cross-site Scripting XSS through dangerous schemes allowed in the HtmlSanitizer class in the...
CVE-2025-26381 OpenBlue Mobile Web Application configuration issue for optional for OpenBlue Workplace (formerly FM Systems)
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information...
Description of the security update for Microsoft Exchange Server Subscription Edition RTM: December 9, 2025 (KB5071876)
None None...
Description of the security update for Microsoft Exchange Server 2019 CU14: December 9, 2025 (KB5071874)
None None...
CVE-2025-34260
Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/action/schedule endpoint. When an authenticated user adds a schedule to an existing task, the schedule name is stored and later rendered in schedule listings without HTML...
Vulnerable-Flask-Web-App-with-intentional-XSS-SQLi-flaws-
Vulnerable-Flask-Web-App-with-intentional-XSS-SQLi-flaws- A de...
CVE-2025-66221 vulnerabilities
Vulnerabilities for packages: mlflow...
GHSA-HGF8-39GV-G3F2 vulnerabilities
Vulnerabilities for packages: mlflow...
GHSA-HGF8-39GV-G3F2 vulnerabilities
Vulnerabilities for packages: localstack, superset, tensorflow-cpu-jupyter, mlflow, tensorflow-gpu-jupyter, azure-functions-python-worker...
CVE-2025-66221 vulnerabilities
Vulnerabilities for packages: localstack, superset, tensorflow-cpu-jupyter, mlflow, tensorflow-gpu-jupyter, azure-functions-python-worker...
CVE-2025-41087
Cross-Site Scripting XSS vulnerability stored in tha Taclia web application, where the uploaded SVG images are not properly sanitized. This allows to the attackers to embed malicious scripts in SVG files such as image profiles, which are then stored on the server and executed in the context of an...
CVE-2025-55796
The openml/openml.org web application (version v2.0.20241110 ) is vulnerable to account takeover due to the use of predictable MD5-based tokens for critical workflows, including signup confirmation, password resets, and email changes. The root cause is that these tokens are generated by hashing t...
The vulnerability in the web application for managing phpMyAdmin, related to the lack of protective measures for the web page structure, allows a perpetrator to execute arbitrary code.
The vulnerability in the web application for managing phpMyAdmin is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
EUVD-2025-150357
Bitplatform Boilerplate is a Visual studio and .NET project template. Versions prior to 9.11.3 are affected by a cross-site scripting XSS vulnerability in the WebInteropApp/WebAppInterop, potentially allowing attackers to inject malicious scripts that compromise the security and integrity of web...
CVE-2025-64710 Bitplatform Boilerplate has cross-site scripting vulnerability
Bitplatform Boilerplate is a Visual studio and .NET project template. Versions prior to 9.11.3 are affected by a cross-site scripting XSS vulnerability in the WebInteropApp/WebAppInterop, potentially allowing attackers to inject malicious scripts that compromise the security and integrity of web...
bit platform 跨站脚本漏洞
bit platform is an open source application builder from the Bit Foundation. A cross-site scripting vulnerability exists in bit platform versions prior to 9.11.3, which stems from the presence of cross-site scripting in WebInteropApp/WebAppInterop, which could lead to the injection of malicious...
pentest-scripts
Pentest Scripts - Unified Security Testing Framework 🎯 Qui...
CVE-2025-62074
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Amauri WPMobile.App wpappninja.This issue affects WPMobile.App: from n/a through = 11.71...