31 matches found
Infusionsoft Gravity Forms Add-on < 1.5.7 - Cross-Site Scripting Detection
Multiple cross-site scripting vulnerabilities in tests/notAutotestContactServicepauseCampaign.php in the Infusionsoft Gravity Forms plugin before 1.5.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 go, 2 contactId, or 3 campaignId parameter. !/usr/bin/env...
CVE-2026-17432
A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functionality of the file hermes-agent/plugins/platforms/simplex/adapter.py of the component SimpleX Gateway Authorization. The manipulation of the argument contactId results in improp...
CVE-2026-17432
A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functionality of the file hermes-agent/plugins/platforms/simplex/adapter.py of the component SimpleX Gateway Authorization. The manipulation of the argument contactId results in improp...
CVE-2026-17432 NousResearch hermes-agent SimpleX Gateway Authorization adapter.py access control
A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functionality of the file hermes-agent/plugins/platforms/simplex/adapter.py of the component SimpleX Gateway Authorization. The manipulation of the argument contactId results in improp...
CVE-2026-17432
The vulnerability CVE-2026-17432 affects NousResearch hermes-agent 2026.6.5. It targets the file hermes-agent/plugins/platforms/simplex/adapter.py within the SimpleX Gateway Authorization component. The issue arises from manipulation of the contactId argument, leading to improper access controls....
CVE-2026-17432: Improper Access Control
A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functionality of the file hermes-agent/plugins/platforms/simplex/adapter.py of the component SimpleX Gateway Authorization. The manipulation of the argument contactId results in improp...
EUVD-2010-4972
Malware in sbrugna...
EUVD-2025-31177
Malicious code in bioql PyPI...
CVE-2025-10987
A vulnerability was determined in YunaiV yudao-cloud up to 2025.09. Affected by this issue is some unknown functionality of the file /crm/contact/transfer of the component HTTP Request Handler. This manipulation of the argument contactId causes improper authorization. It is possible to initiate t...
CVE-2025-10987
A vulnerability was determined in YunaiV yudao-cloud up to 2025.09. Affected by this issue is some unknown functionality of the file /crm/contact/transfer of the component HTTP Request Handler. This manipulation of the argument contactId causes improper authorization. It is possible to initiate t...
CVE-2025-10987
A vulnerability was determined in YunaiV yudao-cloud up to 2025.09. Affected by this issue is some unknown functionality of the file /crm/contact/transfer of the component HTTP Request Handler. This manipulation of the argument contactId causes improper authorization. It is possible to initiate t...
CVE-2025-10987: Improper Authorization
A vulnerability was determined in YunaiV yudao-cloud up to 2025.09. Affected by this issue is some unknown functionality of the file /crm/contact/transfer of the component HTTP Request Handler. This manipulation of the argument contactId causes improper authorization. It is possible to initiate t...
PT-2025-39466
Name of the Vulnerable Software and Affected Versions YunaiV yudao-cloud versions prior to 2025.09 Description A flaw exists in YunaiV yudao-cloud that could lead to improper authorization. This issue is related to the HTTP Request Handler component and the /crm/contact/transfer file. The contact...
CVE-2023-4870: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in SourceCodester Contact Manager App 1.0. This affects an unknown part of the file index.php of the component Contact Information Handler. The manipulation of the argument contactID with the input " leads to cross site scripting. It is...
PT-2023-30908 · Sourcecodester · Sourcecodester Contact Manager App
Name of the Vulnerable Software and Affected Versions: SourceCodester Contact Manager App version 1.0 Description: A problematic vulnerability has been found in the SourceCodester Contact Manager App, affecting an unknown part of the file index.php of the component Contact Information Handler. Th...
GHSA-8JMJ-4P32-MC9P infusionsoft-php-sdk reflected Cross-site Scripting
novaksolutions/infusionsoft-php-sdk before v1.0 is vulnerable to a reflected XSS in the leadscoring.php via ContactId parameter...
CVE-2014-4536: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in tests/notAutotestContactServicepauseCampaign.php in the Infusionsoft Gravity Forms plugin before 1.5.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 go, 2 contactId, or 3 campaignId parameter...
PT-2019-7112
Name of the Vulnerable Software and Affected Versions Infusionsoft Gravity Forms plugin versions prior to 1.5.6 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the go,...
PT-2019-8586
Name of the Vulnerable Software and Affected Versions novaksolutions/infusionsoft-php-sdk version v2016-10-31 novaksolutions/infusionsoft-php-sdk versions before v1.0 Description The issue is related to a reflected XSS in the leadscoring.php file, which can result in code execution. The ContactId...