EUVD-2026-23933

A vulnerability in the SQL Box in the admin interface of OTRS leads to an uncontrolled resource consumption leading to a DoS against the webserver. will be killed by the systemThis issue affects OTRS: 7.0.X 8.0.X 2023.X 2024.X 2025.X 2026.X before 2026.3.X...

CVE-2026-6060

CVE-2026-6060 concerns the SQL Box in the OTRS admin interface. It enables uncontrolled resource consumption causing a DoS on the webserver. Affected: OTRS 7.0.x, 8.0.x, 2023.x, 2024.x, 2025.x, 2026.x before 2026.3.x. CVSS v3.1 base score 4.5 (MEDIUM); vector: Network, Privileges Required High, U...

Cross-Site Scripting (XSS)

code.gitea.io/gitea is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of user input in the search input box used for creating tags and branches, where v-html is used instead of v-text, which allows an attacker to inject and execute malicious scripts in the...

CVE-2025-57931

CVE-2025-57931 : WordPress plugin Popup Box (Ays Pro Popup box) is affected by a Cross-Site Request Forgery (CSRF) vulnerability in versions up to 5.5.4. The connected documents indicate CSRF as the underlying issue; no exploitation details are provided. A fix is to upgrade to a version later tha...

Cobblestone Enterprise Contract Management Software 安全漏洞

Cobblestone Enterprise Contract Management Software is an enterprise contract management software from Cobblestone Corporation, USA. A security vulnerability exists in Cobblestone Enterprise Contract Management Software version 22.4.0, which originates from the presence of stored cross-site...

EUVD-2018-10077

Malware in sbrugna...

EUVD-2012-1424

Malware in sbrugna...

EUVD-2018-8403

Malware in sbrugna...

EUVD-2020-6599

Malware in sbrugna...

EUVD-2025-4059

Malicious code in bioql PyPI...

EUVD-2022-33784

Malicious code in bioql PyPI...

EUVD-2023-27377

Malicious code in bioql PyPI...

EUVD-2023-38686

Malicious code in bioql PyPI...

CVE-2025-5133 Tmall Demo Search Box cross site scripting

A vulnerability classified as problematic has been found in Tmall Demo up to 20250505. Affected is an unknown function of the component Search Box. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be...

CVE-2023-23277

Snippet-box 1.0.0 is vulnerable to Cross Site Scripting XSS. Remote attackers can render arbitrary web script or HTML from the "Snippet code" form field...

CVE-2022-23391

A cross-site scripting XSS vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box...

CVE-2021-2104

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2021-3279

sz.chat version 4 allows injection of web scripts and HTML in the message box...

CVE-2004-0922

AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a write-only AFP Drop Box to be read-write when the Drop Box is on a share that is mounted by a guest, which allows attackers to read the Drop Box...

CVE-2024-9599

The Popup Box WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...