42008 matches found
Arbitrary Code Injection
Overview org.webjars.npm:happy-dom is a Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. It includes many web standards from WHATWG DOM and HTML. Affected versions of this package are vulnerable to Arbitrary Code Injection due to default evaluation o...
Happy-Dom code injection vulnerability
happy-dom is a JavaScript implementation of a web browser without a graphical user interface by the individual developer David Ortner. A code injection vulnerability exists in happy-dom version 19 and earlier, which stems from insufficient isolation of the Node.js VM Context environment and could...
Cherry Studio Code Injection Vulnerability
Cherry Studio is a multi-model AI assistant from China's Thousand Comets Cherry Studio. A code injection vulnerability exists in Cherry Studio, which stems from the direct execution of commands in base64-encoded configuration data when processing URLs of type cherrystudio://mcp, which could lead ...
CVE-2025-61773 pyLoad CNL and captcha handlers allow code Injection via unsanitized parameters
pyLoad is a free and open-source download manager written in Python. In versions prior to 0.5.0b3.dev91, pyLoad web interface contained insufficient input validation in both the Captcha script endpoint and the Click'N'Load CNL Blueprint. This flaw allowed untrusted user input to be processed...
CVE-2025-61773 pyLoad CNL and captcha handlers allow code Injection via unsanitized parameters
pyLoad is a free and open-source download manager written in Python. In versions prior to 0.5.0b3.dev91, pyLoad web interface contained insufficient input validation in both the Captcha script endpoint and the Click'N'Load CNL Blueprint. This flaw allowed untrusted user input to be processed...
EUVD-2025-33353
pyLoad is a free and open-source download manager written in Python. In versions prior to 0.5.0b3.dev91, pyLoad web interface contained insufficient input validation in both the Captcha script endpoint and the Click'N'Load CNL Blueprint. This flaw allowed untrusted user input to be processed...
EUVD-2025-33173
Cross-site scripting XSS vulnerability in the Commerce Product Comparison Table widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML v...
OpnForm code injection vulnerability
OpnForm is a form builder by Julien Nahum Personal Developer. A code injection vulnerability exists in OpnForm 1.9.3 and earlier versions, which stems from an incorrect operation of the component Form Editor in file/api/open/forms, and could lead to a cross-site scripting attack...
Code-Projects Voting System: Code Injection Vulnerability
Code-Projects Voting System is a Code-Projects open source election system. A code injection vulnerability exists in Code-Projects Voting System version 1.0, which stems from incorrect manipulation of the parameters Firstname/Lastname/Platform in the file /admin/candidatesedit.php, which could le...
CVE-2025-60298
The online social reading and writing platform Novel-Plus is vulnerable to a Stored Cross-Site Scripting (XSS) flaw in versions up to and including 5.2.4 . The root cause is the unvalidated input of the indexName parameter via the /author/updateIndexName API endpoint. This allows authenticated at...
OpnForm code injection vulnerability
OpnForm is a form builder by Julien Nahum Personal Developer. A code injection vulnerability exists in OpnForm 1.9.3 and earlier versions, which stems from a cross-site scripting attack in file /show/submissions...
Itsourcecode Leave Management System Code Injection Vulnerability
itsourcecode Leave Management System is an open source leave management system from itsourcecode. A code injection vulnerability exists in version 1.0 of itsourcecode Leave Management System, which stems from incorrect manipulation of the parameter ID in the file /module/employee/controller.php,...
EUVD-2011-3809
Malware in sbrugna...
EUVD-2006-0944
Malware in sbrugna...
EUVD-2014-4118
Malware in sbrugna...
EUVD-2014-8508
Malware in sbrugna...
EUVD-2006-1661
Malware in sbrugna...
EUVD-2006-1086
Malware in sbrugna...