1130 matches found
PT-2025-43789
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rock Content Rock Convert rock-convert allows Stored XSS.This issue affects Rock Convert: from n/a through = 3.0.1...
WordPress plugin Rock Convert 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
EUVD-2025-35759
Malicious code in mender-convert npm...
Malicious code in mender-convert (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 287b36200e3e3bfaa56b44307f2cbc3f2deb931d055cfeb21ea49720e9dd9735 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48574 Malicious code in mender-convert (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 287b36200e3e3bfaa56b44307f2cbc3f2deb931d055cfeb21ea49720e9dd9735 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview mender-convert is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
DEBIAN-CVE-2025-60751
GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987709)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987709 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix race condition between ext4write and ext4convertinlinedata Hulk Robot reported a BUGON:...
CVE-2025-60312
Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting XSS in the "Markdown Input" field, allowing a remote attacker to inject arbitrary HTML/JavaScript code that executes in the victim's browser upon clicking the "Convert to HTML" button...
EUVD-2021-26883
Malware in sbrugna...
EUVD-2018-2145
Malware in sbrugna...
EUVD-2017-8641
Malware in sbrugna...
EUVD-2013-7246
Malware in sbrugna...
EUVD-2017-3151
Malware in sbrugna...
CVE-2025-60312
Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting XSS in the "Markdown Input" field, allowing a remote attacker to inject arbitrary HTML/JavaScript code that executes in the victim's browser upon clicking the "Convert to HTML" button...
EUVD-2025-32717
Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting XSS in the "Markdown Input" field, allowing a remote attacker to inject arbitrary HTML/JavaScript code that executes in the victim's browser upon clicking the "Convert to HTML" button...
CVE-2025-60312
CVE-2025-60312 affects Sourcecodester Markdown to HTML Converter v1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in the "Markdown Input" field that allows a remote attacker to inject arbitrary HTML/JavaScript code, executed in the victim’s browser when the user clicks the "Convert to...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986285)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986285 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix NULL pointer dereference in virtiogpuconngetmodes drmcvtmode may return NULL and ...
RockyLinux 9 : corosync (RLSA-2025:7201)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7201 advisory. corosync: Stack buffer overflow from 'orftokenendianconvert' CVE-2025-30472 Tenable has extracted the preceding description block directly from the RockyLinux...