5070 matches found
PT-2025-42452
Name of the Vulnerable Software and Affected Versions desknet NEO versions V4.0R1.0 through V9.0R2.0 Description A stored cross-site scripting XSS issue exists in desknet NEO. This allows the execution of arbitrary JavaScript code within a user's web browser. The issue involves the ability to...
PT-2025-42371
Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM affected versions not specified Description A reflected cross-site scripting XSS issue exists on an unspecified page within BIG-IP APM. This allows an attacker to execute JavaScript code within the security context of a user who ...
CVE-2025-11183
Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page...
Cross-site Scripting (XSS)
Overview qwc2 is a QGIS Web Client Affected versions of this package are vulnerable to Cross-site Scripting XSS via multiple components, including ServiceInfoWindow, SearchBox, LayerInfoWindow, and others. An attacker can execute arbitrary JavaScript code in the context of the user's browser by...
CVE-2025-11184
CVE-2025-11184 affects QGIS QWC2 Registration GUI up to version 2025.03.31. It enables an authorized attacker to inject arbitrary JavaScript (XSS) into the page, with potential impact to Confidentiality (High) and Integrity (Low) per CVSS. Remediation: upgrade to a version later than 2025.03.31 (...
CVE-2025-11183 Cross-Site Scripting Vulnerability in QWC2
Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page...
CVE-2025-61319
ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting XSS vulnerability in the Vulnerabilities module. When scanning a target with an XSS payload, the unsanitized payload is rendered in the ReNgine web UI, resulting in arbitrary JavaScript execution in the victim's browser. This can b...
CVE-2025-11183: Improper Neutralization of Input During Web Page Generation
Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page...
CVE-2025-60869
Publii CMS v0.46.5 build 17089 allows persistent Cross-Site Scripting XSS via unsanitized input in configuration fields such as "Site Description" and "Footer Follow Buttons". An attacker can inject arbitrary JavaScript, which is stored in the project and executed in the browsers of remote visito...
CVE-2025-55200: Improper Neutralization of Input During Web Page Generation
BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.13, the "Shared Notes" feature contains a Stored Cross-Site Scripting XSS vulnerability with the input location being the "Username" field and the output location on the "Shared Notes" page, when a user with a malicious...
EUVD-2025-33349
A cross-site scripting XSS vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via injecting arbitrary Javascript into a crafted README.md file...
EUVD-2021-15798
Malware in sbrugna...
EUVD-2011-2346
Malware in sbrugna...
EUVD-2021-2084
Malware in sbrugna...
EUVD-2018-12427
Malware in sbrugna...
EUVD-2020-25400
Malware in sbrugna...
EUVD-2020-21411
Malware in sbrugna...
EUVD-2006-6902
Malware in sbrugna...