CVE-2023-29202

XWiki Commons are technical libraries common to several other top level XWiki projects. The RSS macro that is bundled in XWiki included the content of the feed items without any cleaning in the HTML output when the parameter content was set to true. This allowed arbitrary HTML and in particular...

EUVD-2017-3241

Malware in sbrugna...

EUVD-2012-0361

Malware in sbrugna...

EUVD-2015-5297

Malware in sbrugna...

EUVD-2017-6679

Malware in sbrugna...

EUVD-2015-0687

Malware in sbrugna...

EUVD-2021-24859

Malware in sbrugna...

EUVD-2024-33571

Malicious code in bioql PyPI...

EUVD-2024-23407

Malicious code in bioql PyPI...

EUVD-2022-43108

Malicious code in bioql PyPI...

EUVD-2024-0497

Malicious code in bioql PyPI...

EUVD-2025-15142

Malicious code in bioql PyPI...

EUVD-2023-28243

Malicious code in bioql PyPI...

EUVD-2022-4412

Malicious code in bioql PyPI...

EUVD-2022-33979

Malicious code in bioql PyPI...

EUVD-2024-51709

Malicious code in bioql PyPI...

CVE-2025-43229

CVE-2025-43229 affects Apple macOS Sequoia (15.6) and Safari (18.6); the issue, tied to WebKit, enables universal cross-site scripting when processing malicious web content due to a state-management flaw. The NVD entry lists a CVSS v3.1 base score of 6.1 (Network, Low attack complexity, User inte...

CVE-2025-54128

HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.7 and below, the NodeJS version of HAX CMS has a disabled Content Security Policy CSP. This configuration is insecure for a production application because it does not protect against...

CVE-2025-52786

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kingdom Creation Media Folder media-folder allows Reflected XSS.This issue affects Media Folder: from n/a through = 1.0.0...

CVE-2025-53930

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarespecie.php endpoint of the WeGIA application prior to version 3.4.5. This vulnerability allows attackers to inje...