265 matches found
CVE-2025-52670
Revive Adserver is affected by an IDOR-style authorization flaw in the banner deletion workflow. Multiple sources (CNVD, Red Hat, EUVD, NVD/NVD mirrors, OSV, CVE lists, and the HackerOne report) describe a missing ownership check when deleting banners, allowing a user to delete banners owned by a...
CVE-2025-52670
Missing authorization check in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes users on the system to delete banners owned by other accounts...
Revive Adserver 安全漏洞
Revive Adserver is an open source ad serving system that allows advertisers, publishers, and networks to place ads on multiple platforms e.g., websites, apps, video players and supports ad effectiveness tracking, campaign management, and placement rule definition. Revive Adserver suffers from a...
Revive Adserver: Stored-XSS in campaign name displayed in Banners modal
Description: A low-privilege authenticated user can create or edit advertiser/campaign names containing HTML/JavaScript. Those values are stored in the application and later rendered without proper HTML escaping in the admin Inventory → Banners advertiser/campaign picker. When an administrator...
MAL-2025-48792 Malicious code in advertising-banners-frontend (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in advertising-banners-frontend (npm)
--- -= Per source details. Do not edit below this line.=-...
EUVD-2014-4643
Malware in sbrugna...
EUVD-2012-6597
Malware in sbrugna...
EUVD-2014-4642
Malware in sbrugna...
EUVD-2024-49427
Malicious code in bioql PyPI...
EUVD-2023-32322
Malicious code in bioql PyPI...
EUVD-2025-4042
Malicious code in bioql PyPI...
EUVD-2025-21675
Malicious code in bioql PyPI...
EUVD-2021-34234
Malicious code in bioql PyPI...
Malicious code in ecg-js-banners (npm)
The package ecg-js-banners was found to contain malicious code...
Malicious code in generator-longtail-banners (npm)
The package generator-longtail-banners was found to contain malicious code...
MAL-2025-21292 Malicious code in generator-longtail-banners (npm)
The package generator-longtail-banners was found to contain malicious code...
MAL-2025-19114 Malicious code in ecg-js-banners (npm)
The package ecg-js-banners was found to contain malicious code...
CVE-2012-10038
Auxilium RateMyPet contains an unauthenticated arbitrary file upload vulnerability in uploadbanners.php. The banner upload feature fails to validate file types or enforce authentication, allowing remote attackers to upload malicious PHP files. These files are stored in a web-accessible /banners/...
CVE-2012-10038
Auxilium RateMyPet contains an unauthenticated arbitrary file upload vulnerability in uploadbanners.php. The banner upload feature fails to validate file types or enforce authentication, allowing remote attackers to upload malicious PHP files. These files are stored in a web-accessible /banners/...