EUVD-2025-23580

Malicious code in bioql PyPI...

CVE-2025-8535

A vulnerability, which was classified as problematic, has been found in cronoh NanoVault up to 1.2.1. This issue affects the function executeJavaScript of the file /main.js of the component xrb URL Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2025-8535

A vulnerability, which was classified as problematic, has been found in cronoh NanoVault up to 1.2.1. This issue affects the function executeJavaScript of the file /main.js of the component xrb URL Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2025-8535 cronoh NanoVault xrb URL main.js executeJavaScript cross site scripting

A vulnerability, which was classified as problematic, has been found in cronoh NanoVault up to 1.2.1. This issue affects the function executeJavaScript of the file /main.js of the component xrb URL Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2025-8535 cronoh NanoVault xrb URL main.js executeJavaScript cross site scripting

A vulnerability, which was classified as problematic, has been found in cronoh NanoVault up to 1.2.1. This issue affects the function executeJavaScript of the file /main.js of the component xrb URL Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2025-8535 cronoh NanoVault xrb URL main.js executeJavaScript cross site scripting

A vulnerability, which was classified as problematic, has been found in cronoh NanoVault up to 1.2.1. This issue affects the function executeJavaScript of the file /main.js of the component xrb URL Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2025-8535

CVE-2025-8535 affects cronoh NanoVault up to 1.2.1. The vulnerability resides in the executeJavaScript function of /main.js within the xrb URL Handler component and enables cross-site scripting. Attack vector is network-based and remote; exploitation has been disclosed. Products: cronoh NanoVault...

PT-2025-31891 · Cronoh · Nanovault

Name of the Vulnerable Software and Affected Versions: cronoh NanoVault versions up to 1.2.1 Description: A problematic issue exists in cronoh NanoVault due to a cross-site scripting condition. The issue affects the executeJavaScript function within the /main.js file of the xrb URL Handler...