CVE-2025-53926: Improper Neutralization of Input During Web Page Generation

Emlog is an open source website building system. A cross-site scripting XSS vulnerability in emlog up to and including pro-2.5.17 allows remote attackers to inject arbitrary web script or HTML via the comment and comname parameters. Reflected XSS requires the victim to send POST requests, therefo...

emlog cross-site scripting vulnerability

emlog is emlog open source a PHP and MySQL based CMS website builder. A cross-site scripting vulnerability exists in emlog pro-2.5.17 and earlier versions, which stems from insufficient cleanup of the comment and comname parameters and could lead to a remote attacker injecting reflective cross-si...

WordPress plugin FG Drupal to WordPress: code-related vulnerabilities

WordPress FG Drupal to WordPress is a plugin tool for migrating Drupal website content to WordPress, which supports the import of basic content such as articles, images, etc., but the free version does not include the comment import function. WordPress FG Drupal to WordPress suffers from a...

org.xwiki.rendering:xwiki-rendering-macro-box (>=4.2-milestone-1, <=13.10.10), org.xwiki.rendering:xwiki-rendering-macro-comment (>=4.2-milestone-1, <=13.10.10) +13 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=4.2-milestone-1, <=13.10.10)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-3, =4.2-milestone-1, =10.2, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =7.3-milestone-1, =13.1-rc-1,...

org.xwiki.rendering:xwiki-rendering-macro-box (>=14.0, <=14.4.6), org.xwiki.rendering:xwiki-rendering-macro-comment (>=14.0, <=14.4.6) +11 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=14.0, <=14.4.6)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.4.6 Source cves: CVE-2025-53836 Source advisory: GHSA-32MF-57H2-64X9...

org.xwiki.rendering:xwiki-rendering-macro-box (>=14.0, <=14.4.6), org.xwiki.rendering:xwiki-rendering-macro-comment (>=14.0, <=14.4.6) +11 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=14.0, <=14.4.6)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.4.6 Source cves: CVE-2025-53836 Source advisory: OSV:GHSA-32MF-57H2-64X9...

org.xwiki.rendering:xwiki-rendering-macro-box (>=4.2-milestone-1, <=13.10.10), org.xwiki.rendering:xwiki-rendering-macro-comment (>=4.2-milestone-1, <=13.10.10) +13 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=4.2-milestone-1, <=13.10.10)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-3, =4.2-milestone-1, =10.2, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =7.3-milestone-1, =13.1-rc-1,...

org.xwiki.rendering:xwiki-rendering-legacy-transformation-macro (>=14.6-rc-1, <=14.9), org.xwiki.rendering:xwiki-rendering-macro-box (>=14.5, <=14.9) +12 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=14.5, <=14.9)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =14.5, =14.6-rc-1, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.5, =14.9 Source cves: CVE-2025-53836 Source advisory: GHSA-32MF-57H2-64X9...

org.xwiki.rendering:xwiki-rendering-macro-box (>=14.0, <=14.4.6), org.xwiki.rendering:xwiki-rendering-macro-comment (>=14.0, <=14.4.6) +11 more potentially affected by CVE-2025-53836 via org.xwiki.rendering:xwiki-rendering-transformation-macro (>=14.0, <=14.4.6)

org.xwiki.rendering:xwiki-rendering-transformation-macro MAVEN version =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.0, =14.4.6 Source cves: CVE-2025-53836 Source advisory: SNYK:JAVA-ORGXWIKIRENDERING-10743086...

CVE-2025-53818 github-kanban-mcp-server Command Injection vulnerability

GitHub Kanban MCP Server is a Model Context Protocol MCP server for managing GitHub issues in Kanban board format and streamlining LLM task management. Version 0.3.0 of the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Serv...

GitHub Kanban MCP Server: Operating System Command Injection Vulnerability

GitHub Kanban MCP Server is an application for Maki Personal Developers. An operating system command injection vulnerability exists in GitHub Kanban MCP Server version 0.4.0, which stems from a command injection in the addcomment tool...

Malware in comment-on-task-github-action

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2025-6702

A vulnerability, which was classified as problematic, was found in linlinjava litemall 1.8.0. Affected is an unknown function of the file /wx/comment/post. The manipulation of the argument adminComment leads to improper authorization. It is possible to launch the attack remotely. The exploit has...

CVE-2025-6702 linlinjava litemall post improper authorization

A vulnerability, which was classified as problematic, was found in linlinjava litemall 1.8.0. Affected is an unknown function of the file /wx/comment/post. The manipulation of the argument adminComment leads to improper authorization. It is possible to launch the attack remotely. The exploit has...

CVE-2025-6702: Improper Authorization

A vulnerability, which was classified as problematic, was found in linlinjava litemall 1.8.0. Affected is an unknown function of the file /wx/comment/post. The manipulation of the argument adminComment leads to improper authorization. It is possible to launch the attack remotely. The exploit has...

litemall security vulnerability

litemall is a small shopping mall system for linlinjava individual developers. A security vulnerability exists in litemall version 1.8.0, which stems from improper authorization due to misuse of the parameter adminComment in the file /wx/comment/post...

CVE-2025-3629

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to delete another user's comments due to improper ownership management...

Vulnerabilities fixed in IBM InfoSphere Information Server

IBM has fixed vulnerabilities in IBM InfoSphere Information Server Versions 11.7.0.0 to 11.7.1.6. The first vulnerability involves a Denial-of-Service vulnerability that stems from insufficient validation of incoming request sources. This can be exploited to disrupt service availability. The seco...

CVE-2025-3629

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to delete another user's comments due to improper ownership management...

CVE-2025-3629

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to delete another user's comments due to improper ownership management...