EUVD-2006-4950

Malware in sbrugna...

EUVD-2009-0255

Malware in sbrugna...

EUVD-2008-2067

Malware in sbrugna...

EUVD-2010-0002

Malware in sbrugna...

EUVD-2019-4883

Malware in sbrugna...

EUVD-2005-0650

Malware in sbrugna...

EUVD-2008-3208

Malware in sbrugna...

EUVD-2021-0786

Malware in sbrugna...

EUVD-2015-4229

Malware in sbrugna...

EUVD-2022-3033

Malicious code in bioql PyPI...

EUVD-2022-3722

Malicious code in bioql PyPI...

EUVD-2025-12480

Malicious code in bioql PyPI...

EUVD-2021-28825

Malicious code in bioql PyPI...

EUVD-2022-5487

Malicious code in bioql PyPI...

EUVD-2022-2991

Malicious code in bioql PyPI...

Passwords and FIDO2 Are Meant to Be Secret: a Practical Secure Authentication Channel for Web Browsers

Password managers provide significant security benefits to users. However, malicious client-side scripts and browser extensions can steal passwords after the manager has autofilled them into the web page. In this paper, we extend prior work by Stock and Johns, showing how password autofill can be...

CVE-2023-48115

SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skipped when messageHTML and messagePlainText are set in the same request...

CVE-2019-19002

For ABB eSOMS versions 4.0 to 6.0.2, the X-XSS-Protection HTTP response header is not set in responses from the web server. For older web browser not supporting Content Security Policy, this might increase the risk of Cross Site Scripting...

CVE-2019-13389

RainLoop Webmail before 1.13.0 lacks XSS protection mechanisms such as xlink:href validation, the X-XSS-Protection header, and the Content-Security-Policy header...

CVE-2019-15053

The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element...