162 matches found
ssh-chatter
SSH-Chatter: Sistema de Tablón de Anuncios TUI en C ssh [email protected] Software General de BBS SSH-Chatter comenzó como una reimplementación en C del servidor Go ssh-chat. Refleja/extiende el comportamiento original mientras usa patrones modernos de C y un núcleo pequeño y comprobable. El...
Kuicms PHP EE cross-site scripting vulnerability
Kuicms Php EE is a PHP enterprise website content management system developed by Kuicms Corporation. Version 2.0 of Kuicms Php EE contains a cross-site scripting vulnerability. This vulnerability stems from insufficient filtering and escaping of data provided by users. Attackers can exploit this...
CVE-2020-37222
Kuicms Php EE 2.0 is affected by a persistent cross-site scripting (XSS) vulnerability. The issue allows unauthenticated attackers to inject arbitrary scripts by submitting crafted content through the bbs reply endpoint (POST to /web/?c=bbs&a=reply) with HTML/JavaScript payloads in the content pa...
phpBB has Password Reset Link Poisoning via Host Header injection
phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning. When forceservervars is disabled, the servers hostname may be extracted from the HTTP Host header which is used to generate the password reset link URL. An attacker who can manipulate the Hos...
CVE-2025-65779
Wekan up to version 18.15 is affected; fixed in 18.16. An unauthenticated attacker can update a board's sort value because Boards.allow returns true without verifying userId, enabling arbitrary reordering of boards. Affected: Wekan (Open Source Kanban board) prior to 18.16. Impact: potential alte...
CVE-2025-61464
gnuboard gnuboard4 v4.36.04 and before is vulnerable to Second-order SQL Injection via the searchtable in bbs/search.php...
EUVD-2011-1341
Malware in sbrugna...
EUVD-2005-4328
Malware in sbrugna...
EUVD-2006-1580
Malware in sbrugna...
EUVD-2025-13318
Malicious code in bioql PyPI...
EUVD-2025-16823
Malicious code in bioql PyPI...
EUVD-2025-16969
Malicious code in bioql PyPI...
EUVD-2023-55506
Malicious code in bioql PyPI...
EUVD-2023-55513
Malicious code in bioql PyPI...
CVE-2025-6301
A vulnerability, which was classified as problematic, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /admin/manage-notices.php of the component Add Notice. The manipulation of the argument Title/Description leads to cross site scriptin...
CVE-2025-6301
A vulnerability, which was classified as problematic, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /admin/manage-notices.php of the component Add Notice. The manipulation of the argument Title/Description leads to cross site scriptin...
CVE-2025-6301
CVE-2025-6301 affects PHPGurukul Notice Board System 1.0, specifically the Add Notice component via /admin/manage-notices.php. Multiple sources describe a cross-site scripting vulnerability triggered by manipulating the Title/Description parameters, enabling remote exploitation with publicly disc...
PHPGurukul Notice Board System 代码注入漏洞
Notice Board System is a bulletin board system. Notice Board System has a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the parameters Title/Description in the file /admin/manage-notices.php, which can be...
PT-2025-26269 · Unknown · Phpgurukul Notice Board System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Notice Board System version 1.0 Description: A problematic issue has been found in the PHPGurukul Notice Board System, affecting the file /admin/manage-notices.php of the Add Notice component. The manipulation of the Title and...
CVE-2025-6301: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /admin/manage-notices.php of the component Add Notice. The manipulation of the argument Title/Description leads to cross site scriptin...