6706 matches found
PT-2025-41424
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 24.1R4 Description An issue exists in Juniper Networks Junos Space that allows an attacker to inject script tags into the Generate Report page. When another user visits this page, the attacker can...
Missing Authorization
Overview melisplatform/melis-core is a Melis Platform Core module Affected versions of this package are vulnerable to Missing Authorization via the /melis/MelisCore/ToolUser/addNewUser endpoint. An attacker can gain unauthorized administrative access by sending a crafted request to this endpoint...
CVE-2025-11204
The CVE-2025-11204 entry concerns the WordPress plugin RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login, affected up to version 6.0.6.2. The connected sources confirm an authenticated (Administrator+) SQL Injection due to insufficient escaping of user inpu...
OPEXUS FOIAXpress 安全漏洞
OPEXUS FOIAXpress is an information disclosure management software from OPEXUS Corporation. A security vulnerability exists in OPEXUS FOIAXpress versions prior to 11.13.3.0 that originates from an administrative user being able to inject JavaScript or other content into the Technical Support...
OPEXUS FOIAXpress 安全漏洞
OPEXUS FOIAXpress is an information disclosure management software from OPEXUS Corporation. A security vulnerability exists in OPEXUS FOIAXpress versions prior to 11.13.3.0 that originates from an administrative user being able to inject JavaScript or other content into the annual report template...
PT-2025-41302
Name of the Vulnerable Software and Affected Versions Casdoor versions prior to 2.26.0 Description A flaw exists in the permission verification module and organization/application editing interface. This allows remotely authenticated administrators of any organization to circumvent the system's...
CVE-2025-61998 OPEXUS FOIAXpress stored XSS via Hyperlink Manager
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content as a URL within the Technical Support Hyperlink Manager. Injected content is executed in the context of other users when they click the malicious link. Successful exploitation allows the...
CVE-2025-60787
MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as imagefilename. Unsanitized user input is written to Motion configuration files, allowing remote authenticated attackers with admin access to achieve code execution when Motion is restarted...
EUVD-2002-2033
Malware in sbrugna...
EUVD-2021-26397
Malware in sbrugna...
EUVD-2020-5664
Malware in sbrugna...
EUVD-2019-1175
Malware in sbrugna...
EUVD-2020-21674
Malware in sbrugna...
EUVD-2020-5663
Malware in sbrugna...
EUVD-2021-1477
Malware in sbrugna...
EUVD-2020-28998
Malware in sbrugna...
EUVD-2020-15881
Malware in sbrugna...
EUVD-2014-5082
Malware in sbrugna...