5725 matches found
CVE-2025-11276 Rebuild Comment/Guestbook cross site scripting
A security flaw has been discovered in Rebuild up to 4.1.3. Affected by this issue is some unknown functionality of the component Comment/Guestbook. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 4.1.4 can resolve this...
Rebuild code injection vulnerabilities
Rebuild is a highly customizable enterprise management system from getrebuild open source. A code injection vulnerability exists in Rebuild 4.1.3 and earlier versions, which stems from improper manipulation of the Comment/Guestbook component and could lead to a cross-site scripting attack...
CVE-2025-11276: Improper Neutralization of Input During Web Page Generation
A security flaw has been discovered in Rebuild up to 4.1.3. Affected by this issue is some unknown functionality of the component Comment/Guestbook. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 4.1.4 can resolve this...
PT-2025-40785
Name of the Vulnerable Software and Affected Versions Rebuild versions up to 4.1.3 Description A security flaw exists in Rebuild’s Comment/Guestbook component, potentially allowing for cross site scripting. Remote manipulation of an unknown functionality within the component can trigger this issu...
CVE-2023-53536
CVE-2023-53536 affects the Linux kernel in the blk-crypto subsystem. The issue stems from blk_crypto_evict_key() sometimes returning early without unlinking the key from the keyslot management structures, while the caller proceeds to free the blk_crypto_key. This mismatch can cause a use-after-fr...
CVE-2025-10311
The Comment Info Detector plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.5. This is due to missing nonce validation on the options.php file when handling form submissions. This makes it possible for unauthenticated attackers to modify...
WordPress Comment Info Detector plugin <= 1.0.5 - Cross-Site Request Forgery to Settings Update vulnerability
Cross-Site Request Forgery to Settings Update vulnerability discovered by Nabil Irawan in WordPress Plugin Comment Info Detector versions = 1.0.5...
EUVD-2025-28128
Malicious code in bioql PyPI...
EUVD-2022-24992
Malicious code in bioql PyPI...
EUVD-2022-5333
Malicious code in bioql PyPI...
EUVD-2025-32040
Malicious code in bioql PyPI...
EUVD-2023-36070
Malicious code in bioql PyPI...
EUVD-2022-28814
Malicious code in bioql PyPI...
EUVD-2024-54392
Malicious code in bioql PyPI...
EUVD-2025-10655
Malicious code in bioql PyPI...
EUVD-2025-28919
Malicious code in bioql PyPI...
EUVD-2022-2790
Malicious code in bioql PyPI...
EUVD-2022-2601
Malicious code in bioql PyPI...