270 matches found
CVE-2025-10240
A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated session...
EUVD-2025-33341
A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated session...
CVE-2025-10240
Progress Flowmon web application prior to version 12.5.5 is vulnerable to an issue where a user who clicks a crafted or malicious link can trigger unintended actions within their existing authenticated session. The CVE entry (CVE-2025-10240) lists a high impact with CVSS 3.1 score 8.8 (AV:N/AC:L/...
CVE-2025-10240 Possibility of unintended actions when a user clicks a malicious link in the Progress Flowmon web application
A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated session...
PT-2025-41379
Name of the Vulnerable Software and Affected Versions Progress Flowmon versions prior to 12.5.5 Description A flaw exists in the Progress Flowmon web application that allows an attacker to manipulate authenticated users through malicious links. Clicking a crafted link can trigger unintended actio...
EUVD-2018-9987
Malware in sbrugna...
EUVD-2016-10170
Malware in sbrugna...
EUVD-2021-25503
Malware in sbrugna...
EUVD-2020-27000
Malware in sbrugna...
EUVD-2018-6757
Malware in sbrugna...
EUVD-2024-31887
Malicious code in bioql PyPI...
EUVD-2022-29286
Malicious code in bioql PyPI...
EUVD-2024-19761
Malicious code in bioql PyPI...
EUVD-2022-29284
Malicious code in bioql PyPI...
EUVD-2024-21336
Malicious code in bioql PyPI...
EUVD-2025-17637
Malicious code in bioql PyPI...
EUVD-2025-1987
Malicious code in bioql PyPI...
CVE-2025-59845 Apollo Embedded Sandbox and Explorer vulnerable to CSRF via window.postMessage origin-validation bypass
Apollo Studio Embeddable Explorer & Embeddable Sandbox are website embeddable software solutions from Apollo GraphQL. Prior to Apollo Sandbox version 2.7.2 and Apollo Explorer version 3.7.3, a cross-site request forgery CSRF vulnerability was identified. The vulnerability arises from missing orig...
PT-2025-37180
Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.2 Description: The Online Fire Reporting System contains a stored cross-site scripting issue. The vulnerability is due to insufficient validation of user inputs for the fullname, location, and message...
Cross-Site WebSocket Hijacking (CSWSH)
github.com/komari-monitor/komari, is vulnerable to Cross-Site WebSocket Hijacking CSWSH. The vulnerability is due to disabled origin checking, which allows an attacker to hijack authenticated user WebSocket connections...