EUVD-2025-38056

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in appscreo Easy Social Share Buttons easy-social-share-buttons3 allows Reflected XSS.This issue affects Easy Social Share Buttons: from n/a through 10.7.1...

CrushFTP 代码注入漏洞

CrushFTP is a file transfer server. A security vulnerability exists in CrushFTP versions prior to 10.7.1 and 11.1.0, which originates from a vulnerability that could allow a low-privileged remote attacker to read files from a file system other than the VFS sandbox...

Jellyfin 路径遍历漏洞

Jellyfin is a freeware media system. It allows you to control the management and streaming of media. It is an alternative to the proprietary Emby and Plex, allowing media from dedicated servers to be served to end-user devices through multiple applications. A security vulnerability exists in...