CVE-2025-62095: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in neilgee Bootstrap Modals bootstrap-modals allows Stored XSS.This issue affects Bootstrap Modals: from n/a through = 1.3.2...

WordPress plugin Bootstrap Modals 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Twitter Bootstrap Collapse aka Accordian Shortcode plugin <= 1.0 - Stored XSS via Shortcode vulnerability

Stored XSS via Shortcode vulnerability discovered by Bob Matyas in WordPress Plugin Twitter Bootstrap Collapse aka Accordian Shortcode versions = 1.0...

Malicious code in bootstrap-setflexcolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90557c8cf061fb243537b42df1c27af4fc410d5a3bbeb6df2346720058fa9d4f The package bootstrap-setflexcolor was found to contain malicious code...

EUVD-2025-204935

Malicious code in bootstrap-setflexcolor npm...

MAL-2025-192718 Malicious code in bootstrap-setflexcolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90557c8cf061fb243537b42df1c27af4fc410d5a3bbeb6df2346720058fa9d4f The package bootstrap-setflexcolor was found to contain malicious code...

EUVD-2025-204936

Malicious code in bootstrap-setcolors npm...

Malicious code in bootstrap-setcolors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49438d0a37b288cf5dcbc9c27b5bc18510beec255d1d359a1f5a25361d4b121e The package bootstrap-setcolors was found to contain malicious code...

MAL-2025-192717 Malicious code in bootstrap-setcolors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49438d0a37b288cf5dcbc9c27b5bc18510beec255d1d359a1f5a25361d4b121e The package bootstrap-setcolors was found to contain malicious code...

EUVD-2025-204937

Malicious code in bootstrap-setcolor npm...

Malicious code in bootstrap-setcolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e711bb0bea7ae170d6be10137758bbb8e7d4fd0d987de9183d58c6ee224f41 The package bootstrap-setcolor was found to contain malicious code...

MAL-2025-192716 Malicious code in bootstrap-setcolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e711bb0bea7ae170d6be10137758bbb8e7d4fd0d987de9183d58c6ee224f41 The package bootstrap-setcolor was found to contain malicious code...

FastAdmin SQL注入漏洞

FastAdmin is a set of web backend development framework based on ThinkPHP and Bootstrap by Karson's personal developer. FastAdmin 1.7.0.20250506 and earlier versions exist SQL injection vulnerability, the vulnerability stems from the application/common/controller/Backend.php file...

PYSEC-2025-103

Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to the /console/api/system-features endpoint without any authentication credentials or session tokens. The endpoint fails to implement proper authorization checks, allowing anonymous...

PYSEC-2025-103

Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to the /console/api/system-features endpoint without any authentication credentials or session tokens. The endpoint fails to implement proper authorization checks, allowing anonymous...

CVE-2025-63387

Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to the /console/api/system-features endpoint without any authentication credentials or session tokens. The endpoint fails to implement proper authorization checks, allowing anonymous...

Medium: aws-cfn-bootstrap

Issue Overview: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc...

XSS in Bootstrap button component

...

com.amazonaws.serverless:aws-serverless-java-container-struts (>=1.9, <=1.9.4), com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=4.0.2, <=5.0.6) +77 more potentially affected by CVE-2025-64775 +1 more via org.apache.struts:struts2-core (>=6.0.0, <=6.7.4)

org.apache.struts:struts2-core MAVEN version =6.0.0, =1.9, =4.0.2, =4.0.2, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =1.4.0, =1.4.1, =1.4.0, =1.4.3 and more Source cves: CVE-2025-64775, CVE-2025-66675https://vulne...

Malicious Package

Overview bootstrap-setcolors is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this...