EUVD-2024-52695

Malicious code in bioql PyPI...

Cross site scripting

Cross-site scripting XSS vulnerability in systemnameset.cgi in TP-Link TL-SG108E 1.0.0 allows authenticated remote attackers to submit arbitrary java script via the 'sysName' parameter...

Debian DSA-541-1 : icecast-server - missing escape

Markus Worle discovered a cross site scripting problem in status-display list.cgi of the icecast internal webserver, an MPEG layer III streaming server. The UserAgent variable is not properly htmlescaped so that an attacker could cause the client to execute arbitrary Java script commands...