CVE-2025-8461

Seres Software syWEB is affected by CVE-2025-8461 through version up to 03022026. The issue is an improper neutralization of input during web page generation, causing a Reflected XSS. Validated details from multiple sources (Red Hat, CIRCL, CVE list, and PT-Security) confirm the vulnerability typ...

CVE-2025-8456

CVE-2025-8456 affects Kod8 Individual and SME Website. Red Hat and Circl/CIRCL data confirm a vulnerability in input handling during web page generation, leading to a Reflected XSS . Affected software/versions are cited as Kod8 Individual and SME Website up to 03022026. The underlying cause is im...

MAL-2026-692 Malicious code in graphrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 999c8394a8d5c821b17e5e5574f8d881c1281de19cc1df8af7f5dc82efe8a57f The package graphrix was found to contain malicious code. Source: ghsa-malware 88b6625fcbb125b7b3432974b307d94dfbe798496eb8285a739807f9d4b413a2 Any...

CVE-2026-20704

Cross-site request forgery vulnerability exists in ELECOM wireless LAN products. If a user accesses a malicious page while logged-in to the affected product, unintended operations may be performed...

K000159855: Multiple MySQL vulnerabilities

Security Advisory Description CVE-2026-21937 Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access v...

MAL-2026-662 Malicious code in researchpoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee8d68b9386bf55de2d3ed033493507ee88db166ae46345172ba93d938f3a27 The package researchpoc was found to contain malicious code. Source: ghsa-malware 912631f8dc76f3b4ddae075966fd902e7ab19c0799a0cd29b0c9ece7d79cd1ce An...

CVE-2026-1788 Buffer Overflow in Xquic Server

: Out-of-bounds Write vulnerability in Xquic Project Xquic Server xquic on Linux QUIC protocol implementation, packet processing module modules allows : Buffer Manipulation.This issue affects Xquic Server: through 1.8.3...

CVE-2026-24933

CVE-2026-24933 describes an improper SSL/TLS certificate validation in the API communication component, allowing MITM interception of HTTPS traffic and exposure of sensitive user data (emails, MD5 hashes, device serial numbers). Affected software: ADM 4.1.0–4.3.3.ROF1 and ADM 5.0.0–5.1.1.RCI1. Ro...

CVE-2026-24932

The CVE-2026-24932 issue is an improper TLS/SSL certificate hostname validation in ADM’s DDNS update function. The vulnerability allows a remote attacker to perform a Man‑in‑the‑Middle (MitM) attack over HTTPS, potentially exposing sensitive DDNS updating data such as the user’s email, MD5‑hashed...

CVE-2026-24932 An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.

The DDNS update function in ADM fails to properly validate the hostname of the DDNS server's TLS/SSL certificate. Although the connection uses HTTPS, an improper validated TLS/SSL certificates allows a remote attacker can intercept the communication to perform a Man-in-the-Middle MitM attack, whi...

CVE-2025-61658

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/GlobalContributions/GlobalContributionsPager.Php. This issue affects CheckUser: from before 1.43.4, 1.44.1...

CVE-2025-61653

Vulnerability in Wikimedia Foundation TextExtracts. This vulnerability is associated with program files includes/ApiQueryExtracts.Php. This issue affects TextExtracts: from before 1.39.14, 1.43.4, 1.44.1...

UBUNTU-CVE-2025-61653

Vulnerability in Wikimedia Foundation TextExtracts. This vulnerability is associated with program files includes/ApiQueryExtracts.Php. This issue affects TextExtracts: from before 1.39.14, 1.43.4, 1.44.1...

UBUNTU-CVE-2025-61652

Vulnerability in Wikimedia Foundation DiscussionTools.This issue affects DiscussionTools: from before 1.43.4, 1.44.1...

CVE-2025-58383

CVE-2025-58383 : Brocade Fabric OS before 9.2.1c2 contains a privilege-escalation flaw where an administrator-level user can abuse the bind command to bypass security controls and execute arbitrary commands. The issue is documented across multiple sources (NVD/Red Hat/Broadcom advisories) with th...

EUVD-2025-206761

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.JqueryMsg/mediawiki.JqueryMsg.Js. This issue affects MediaWiki: from before 1.39.1...

CVE-2025-67481

CVE-2025-67481 is an XSS in MediaWiki related to client-side messages (mediawiki.JqueryMsg.Js) where improper input neutralization affects certain MediaWiki versions (pre-1.39.16, 1.43.6, 1.44.3, 1.45.1). Public references in multiple feeds (NVD, Debian OSV, UBUNTU OSV, EUVD) corroborate an input...

EUVD-2025-206647

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Page.Preview.Js. This issue affects MediaWiki: from before 1.43.6, 1.44.3, 1.45.1...

CVE-2025-11261

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Language/mediawiki.Language.Js. This issue affects MediaWiki: from before 1.39.15,...

CVE-2025-61657

CVE-2025-61657 is an XSS vulnerability in the Wikimedia Foundation Vector UI skin, specifically related to resources/skins.Vector.Js/stickyHeader.Js. Affected: Vector prior to 1.43.4 and 1.44.1. Root cause: improper neutralization of input during web page generation. Impact and exploitability are...