37446 matches found
CVE-2025-56683: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via injecting arbitrary Javascript into a crafted README.md file...
PT-2025-41379
Name of the Vulnerable Software and Affected Versions Progress Flowmon versions prior to 12.5.5 Description A flaw exists in the Progress Flowmon web application that allows an attacker to manipulate authenticated users through malicious links. Clicking a crafted link can trigger unintended actio...
CVE-2025-27053: Incorrect Calculation of Buffer Size
Memory corruption during PlayReady APP usecase while processing TA commands...
CVE-2025-5009 Information Disclosure in Gemini iOS App
In Gemini iOS, when a user shared a snippet of a conversation, it would share the entire conversation via a sharable public link that contained the entire conversation history and not just the snippet...
CVE-2025-5009 Information Disclosure in Gemini iOS App
In Gemini iOS, when a user shared a snippet of a conversation, it would share the entire conversation via a sharable public link that contained the entire conversation history and not just the snippet...
CVE-2025-5009
In Gemini iOS, the sharing flow for a conversation snippet inadvertently exposes the entire conversation history via a publicly accessible link. Affected software: Gemini iOS. Root cause: the share mechanism does not limit content to the selected snippet, leading to information disclosure of prev...
CVE-2025-37728
creationtimestamp| type| source ---|---|--- 2025-10-08 08:39:07+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3m2oaintohc2g...
CVE-2025-11418
creationtimestamp| type| source ---|---|--- 2025-10-08 01:34:17+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m2nireytn62a 2025-10-08 13:24:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115338765143493178...
Malicious code in simple-app-theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12841bf7b69cb4d4bbfe8fe7d87b976164b92187dae534f07331b5025779b542 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48347 Malicious code in simple-app-theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12841bf7b69cb4d4bbfe8fe7d87b976164b92187dae534f07331b5025779b542 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-11360 jakowenko double-take API app.js app.use cross site scripting
A vulnerability was detected in jakowenko double-take up to 1.13.1. The impacted element is the function app.use of the file api/src/app.js of the component API. The manipulation of the argument X-Ingress-Path results in cross site scripting. The attack can be executed remotely. Upgrading to...
CVE-2025-11360 jakowenko double-take API app.js app.use cross site scripting
A vulnerability was detected in jakowenko double-take up to 1.13.1. The impacted element is the function app.use of the file api/src/app.js of the component API. The manipulation of the argument X-Ingress-Path results in cross site scripting. The attack can be executed remotely. Upgrading to...
CVE-2025-11362
CVE-2025-11362 affects the pdfmake package prior to 0.3.0-beta.17, where an attacker can trigger repeated URL redirects in file embedding, potentially causing the application to crash or become unresponsive. The issue is categorized as Allocation of Resources Without Limits or Throttling and has ...
EUVD-2020-24009
Malware in sbrugna...
EUVD-2012-4331
Malware in sbrugna...
EUVD-2016-6450
Malware in sbrugna...
EUVD-2020-6754
Malware in sbrugna...
EUVD-2012-1433
Malware in sbrugna...