Lucene search
K

242 matches found

OSV
OSV
added 2025/10/30 6:15 p.m.3 views

CVE-2025-56313

A Reflected Cross-Site Scripting XSS vulnerability was discovered in the /publix/run endpoint of JATOS 3.7.1 through 3.9.6 inclusive. This allows remote attackers to execute arbitrary JavaScript in a user's web browser by including a malicious payload in the "code" URL parameter. When an...

6.1CVSS6.3AI score0.00196EPSS
Exploits0References2
NVD
NVD
added 2025/10/30 6:15 p.m.6 views

CVE-2025-56313

A Reflected Cross-Site Scripting XSS vulnerability was discovered in the /publix/run endpoint of JATOS 3.7.1 through 3.9.6 inclusive. This allows remote attackers to execute arbitrary JavaScript in a user's web browser by including a malicious payload in the "code" URL parameter. When an...

6.1CVSS0.00196EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/30 12:0 a.m.4 views

PT-2025-44439

Name of the Vulnerable Software and Affected Versions JATOS versions 3.7.1 through 3.9.6 Description A Reflected Cross-Site Scripting XSS issue exists in JATOS. This allows remote attackers to execute arbitrary JavaScript in a user's web browser by including a malicious payload in the code URL...

6.1CVSS6.2AI score0.00196EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2025/10/30 12:0 a.m.2 views

CVE-2025-56313

A Reflected Cross-Site Scripting XSS vulnerability was discovered in the /publix/run endpoint of JATOS 3.7.1 through 3.9.6 inclusive. This allows remote attackers to execute arbitrary JavaScript in a user's web browser by including a malicious payload in the "code" URL parameter. When an...

5.9AI score0.00196EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/30 12:0 a.m.6 views

CVE-2025-56313

A Reflected Cross-Site Scripting XSS vulnerability was discovered in the /publix/run endpoint of JATOS 3.7.1 through 3.9.6 inclusive. This allows remote attackers to execute arbitrary JavaScript in a user's web browser by including a malicious payload in the "code" URL parameter. When an...

0.00196EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/22 6:40 a.m.4 views

EUVD-2025-35324

The Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'proversionactivationcode' parameter in all versions up to, and including, 3.0.10 due to insufficient inp...

4.4CVSS4.7AI score0.00173EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2015-7301

Malware in sbrugna...

4.3CVSS6.1AI score0.04405EPSS
Exploits3References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-6531

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00257EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-4371

Malicious code in bioql PyPI...

5.4CVSS5.5AI score0.00851EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-1204

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.01353EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-26332

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00403EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-27291

Malicious code in bioql PyPI...

7.5CVSS6.5AI score0.00456EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-15724

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00788EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-30400

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00505EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2022-0978

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.01353EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/09/24 5:35 a.m.12 views

CVE-2025-10783

A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addsubject.php. Executing manipulation of the argument subjectcode can lead to sql injection. The attack may be performed from remote. T...

9.8CVSS7AI score0.00387EPSS
Exploits1References1
OSV
OSV
added 2025/09/22 6:15 a.m.2 views

CVE-2025-10784

A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/editsubject.php. The manipulation of the argument subjectcode leads to sql injection. It is possible to initiate the attack...

9.8CVSS5.8AI score
Exploits0References5
NVD
NVD
added 2025/09/22 5:15 a.m.4 views

CVE-2025-10783

A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addsubject.php. Executing manipulation of the argument subjectcode can lead to sql injection. The attack may be performed from remote. T...

9.8CVSS0.00387EPSS
Exploits1References5
CVE
CVE
added 2025/09/22 5:2 a.m.16 views

CVE-2025-10783

CVE-2025-10783 affects Campcodes Online Learning Management System v1.0; vulnerability in /admin/add_subject.php where manipulating the subject_code parameter can cause SQL injection. Exploitation is remote and public exploits exist. No official patch details in provided docs; consider temporary ...

9.8CVSS7.2AI score0.00387EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.2 views

CampCodes Online Learning Management System 安全漏洞

CampCodes Online Learning Management System is an online learning management system from CampCodes Philippines, Inc. A security vulnerability exists in Campcodes Online Learning Management System version 1.0, which stems from the incorrect manipulation of the parameter subjectcode in the file...

9.8CVSS7.7AI score0.00387EPSS
Exploits1References5
Rows per page
Query Builder