10200 matches found
Cross-site Scripting (XSS)
Overview DotNetNuke.Core is a references provider to the DotNetNuke.dll to develop extensions for the DNN Platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Activity Feed Attachments endpoint. An attacker can execute arbitrary scripts in the context of...
CVE-2025-52485
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted request to inject scripts in the Activity Feed Attachments endpoint which will then render in the feed. This issue...
CVE-2025-52485 DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted request to inject scripts in the Activity Feed Attachments endpoint which will then render in the feed. This issue...
CVE-2025-52485
CVE-2025-52485 affects DNN Platform (DotNetNuke) before version 10.0.1. Versions 6.0.0 to
CVE-2025-52485 DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted request to inject scripts in the Activity Feed Attachments endpoint which will then render in the feed. This issue...
CVE-2025-52485 DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted request to inject scripts in the Activity Feed Attachments endpoint which will then render in the feed. This issue...
MAL-2025-5190 Malicious code in integromat-iml (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6af30570799ed9c117bc1004bec1b6c1a0c75b8a53daa173ecb21f6f8f92216 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in camelcase-v2 (npm)
The package communicates with a domain associated with malicious activity...
DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed
DNN.PLATFORM allows a specially crafted request can inject scripts in the Activity Feed Attachments endpoint which will then render in the feed, resulting in a cross-site scripting attack. This vulnerability is fixed in 10.0.1...
GHSA-WWC9-WMM3-2PMF DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed
DNN.PLATFORM allows a specially crafted request can inject scripts in the Activity Feed Attachments endpoint which will then render in the feed, resulting in a cross-site scripting attack. This vulnerability is fixed in 10.0.1...
CVE-2025-38083
creationtimestamp| type| source ---|---|--- 2025-06-20 11:46:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18933 2025-07-30 17:02:49+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lv73zcnzx327 2025-07-30 17:03:19+00:00| seen|...
CVE-2025-4981
creationtimestamp| type| source ---|---|--- 2025-06-20 10:44:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18927 2025-06-20 12:15:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114715637785288887 2025-06-20 13:23:39+00:00| seen|...
CVE-2025-6322
creationtimestamp| type| source ---|---|--- 2025-06-20 09:41:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18922 2025-06-20 10:01:43+00:00| published-proof-of-concept| Telegram/p4cwm2yjSN4ovrDbIKK0UGlBzlMUWXB5O0q8DxAqqucQZuA 2025-06-20 10:36:31+00:00| seen|...
Dotnetnuke < 10.0.1 Stored Cross-Site Scripting (XSS) in Activity Feed (CVE-2025-52485)
According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.0.1. It is, therefore, affected by a vulnerability. - DNN.PLATFORM Allows Stored Cross-Site Scripting XSS in Activity Feed CVE-2025-52485 Note that Nessus has not tested for this iss...
VReaves: Eavesdropping on Virtual Reality App Identity and Activity Via Electromagnetic Side Channels
Virtual reality VR has recently proliferated significantly, consisting of headsets or head-mounted displays HMDs and hand controllers for an embodied and immersive experience. The VR device is usually embedded with different kinds of IoT sensors, such as cameras, microphones, communication sensor...
Dotnetnuke < 10.0.1 Stored Cross-Site Scripting (XSS) in Activity Feed (GHSA-wwc9-wmm3-2pmf)
According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.0.1. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
Malicious code in nifi-frontend (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5483 Malicious code in wonderland-api-security-plugin (npm)
The package communicates with a domain associated with malicious activity...