792 matches found
CVE-2023-53985
CVE-2023-53985 affects Zstore (now Zippy CRM) version 6.5.4. A reflected cross-site scripting vulnerability exists due to unvalidated input parameters, allowing an attacker to inject and execute arbitrary JavaScript in a victim’s browser context. The CVSS metrics indicate network access with low ...
PT-2025-54855
Уязвимость платформы бизнес-аналитики RTAnalytics связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный JavaScript-код...
PT-2025-55200
Уязвимость многофункционального онлайн редактора изображений для UI/UX дизайна PIXSO связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный JavaScript-код...
CVE-2025-63693: Improper Control of Generation of Code
The comment editing template dzz/comment/template/editform.htm in DzzOffice 2.3.x lacks adequate security escaping for user-controllable data in multiple contexts, including HTML and JavaScript strings. This allows low-privilege attackers to construct comment content or request parameters and...
CVE-2025-59840
Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. In Vega prior to version 6.2.0, applications meeting 2 conditions are at risk of arbitrary JavaScript code execution, even if "safe mode" expressionInterpreter is used. They...
CVE-2025-59840: Improper Neutralization of Input During Web Page Generation
Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. In Vega prior to version 6.2.0, applications meeting 2 conditions are at risk of arbitrary JavaScript code execution, even if "safe mode" expressionInterpreter is used. They...
IPFire security vulnerabilities
IPFire is an open source Linux distribution from the IPFire organization, used primarily as a router and firewall. IPFire suffers from a cross-site scripting vulnerability that can be exploited by attackers to inject arbitrary JavaScript code...
PT-2025-42453
Name of the Vulnerable Software and Affected Versions desknet's Web Server affected versions not specified Description A reflected cross-site scripting XSS issue exists in desknet's Web Server. This allows the execution of arbitrary JavaScript code within a user's web browser. The issue involves...
EUVD-2021-15747
Malware in sbrugna...
EUVD-2019-0680
Malware in sbrugna...
EUVD-2017-10162
Malware in sbrugna...
EUVD-2021-16283
Malware in sbrugna...
EUVD-2020-25400
Malware in sbrugna...
EUVD-2020-5532
Malware in sbrugna...
EUVD-2018-12427
Malware in sbrugna...
EUVD-2017-10272
Malware in sbrugna...
EUVD-2016-10538
Malware in sbrugna...
EUVD-2021-25332
Malware in sbrugna...