2283 matches found
Pimcore Admin Classic Bundle Cross-Site Scripting Vulnerability
Pimcore Admin Classic Bundle is a Pimcore open source a core bundle of Pimcore. The Pimcore Admin Classic Bundle suffers from a cross-site scripting vulnerability that stems from HTML injection, which can be exploited by an attacker to steal session cookies...
Security update for cosign
This update for cosign fixes the following issues: CVE-2024-6104: cosign: hashicorp/go-retryablehttp: Fixed sensitive information disclosure to log file bsc1227031 CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Fixed bad documentation of error handling in ParseWithClaims leading to...
CVE-2025-30166 Pimcore's Admin Classic Bundle allows HTML Injection
Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. An HTML injection issue allows users with access to the email sending functionality to inject arbitrary HTML code into emails sent via the admin interface, potentially leading to session cookie theft and the alteration of page...
CVE-2025-30166 Pimcore's Admin Classic Bundle allows HTML Injection
Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. An HTML injection issue allows users with access to the email sending functionality to inject arbitrary HTML code into emails sent via the admin interface, potentially leading to session cookie theft and the alteration of page...
Pimcore Admin Classic Bundle 跨站脚本漏洞
Pimcore Admin Classic Bundle is a Pimcore open source a core bundle of Pimcore. The Pimcore Admin Classic Bundle suffers from a cross-site scripting vulnerability that stems from HTML injection, which can be exploited by an attacker to steal session cookies...
PT-2025-15421 · Pimcore · Pimcore Admin Classic Bundle
Name of the Vulnerable Software and Affected Versions: Pimcore Admin Classic Bundle versions prior to 1.7.6 Description: An HTML injection issue in Pimcore's Admin Classic Bundle allows users with access to the email sending functionality to inject arbitrary HTML code into emails sent via the adm...
CVE-2024-38611
creationtimestamp| type| source ---|---|--- 2025-04-07 08:44:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10686 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
CVE-2024-46772
creationtimestamp| type| source ---|---|--- 2025-04-07 08:44:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10685 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
CVE-2025-21969
creationtimestamp| type| source ---|---|--- 2025-04-01 19:44:39+00:00| seen| https://t.me/cvedetector/21791 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
PT-2025-04: Partial Denial of Service (DoS) in Mobile Security Framework (MobSF)
The vulnerability was identified in Mobile Security Framework MobSF , versions 4.3.0. The discovered vulnerability allows an attacker to modify the Info.plist file and add special characters to the bundle identifier, resulting in a denial of service 500 error of the application. Vulnerability...
CVE-2022-49761
creationtimestamp| type| source ---|---|--- 2025-03-28 15:28:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9361 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
Malicious code in test-utils-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c296c435648a7ea93add03c751dc85edae75eeaf8f9e36b3059aa28846dc654 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Cross-site Scripting (XSS)
Overview contao/core-bundle is an Open Source PHP Content Management System for people who want a professional website that is easy to maintain. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the uploadTo function in FileUpload.php. An attacker can execute scripts...
CERTFR-2024-ALE-001
creationtimestamp| type| source ---|---|--- 2025-03-11 20:37:58+00:00| seen| https://vulnerability.circl.lu/bundle/11268897-8798-4ec2-bcac-b23fe0715823...
CERTFR-2021-ALE-022
creationtimestamp| type| source ---|---|--- 2025-03-11 20:37:58+00:00| seen| https://vulnerability.circl.lu/bundle/11268897-8798-4ec2-bcac-b23fe0715823...
CERTFR-2024-ALE-013
creationtimestamp| type| source ---|---|--- 2025-03-11 20:37:58+00:00| seen| https://vulnerability.circl.lu/bundle/11268897-8798-4ec2-bcac-b23fe0715823...
promptflow-image-bundle (=0.1.0) potentially affected by CVE-2025-24986 via promptflow-tools (=0.1.0b12)
promptflow-tools PYPI version =0.1.0b12 is affected by a known vulnerability. The following packages have a transitive dependency on promptflow-tools and may be impacted: - promptflow-image-bundle =0.1.0 Source cves: CVE-2025-24986 Source advisory: OSV:GHSA-GPRR-V9F2-PX3C...
CVE-2022-49728
creationtimestamp| type| source ---|---|--- 2025-03-08 04:35:53+00:00| seen| Telegram/gBKlWYAuvStasUWdiVwWPqy90SnR8b6xWHcqv003CTmfazQZ 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
CVE-2021-47339
creationtimestamp| type| source ---|---|--- 2025-03-08 04:34:09+00:00| seen| Telegram/vOWFyluW-CZHNdVpDAHa-2wL-UpjY0oB9VlMJhv-U4OQ81 2025-05-04 07:18:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14729 2025-12-03 14:14:49+00:00| seen|...
