1198 matches found
CVE-2020-7109
The Elementor Page Builder plugin before 2.8.4 for WordPress does not sanitize data during creation of a new template...
UBUNTU-CVE-2026-22028
Preact, a lightweight web development framework, JSON serialization protection to prevent Virtual DOM elements from being constructed from arbitrary JSON. A regression introduced in Preact 10.26.5 caused this protection to be softened. In applications where values from JSON payloads are assumed t...
CVE-2026-22028 Preact has JSON VNode Injection issue
Preact, a lightweight web development framework, JSON serialization protection to prevent Virtual DOM elements from being constructed from arbitrary JSON. A regression introduced in Preact 10.26.5 caused this protection to be softened. In applications where values from JSON payloads are assumed t...
PT-2025-52495
Name of the Vulnerable Software and Affected Versions Orejime versions prior to 2.3.2 Description Orejime, a consent manager focusing on accessibility, had a flaw where malicious code could be executed on HTML elements it handled. This occurred because the software, prior to version 2.3.2, would...
GHSA-G6QX-WQ5W-WR8V Mattermost Desktop App exposes sensitive information in its application logs
Mattermost Desktop App versions 6.0.0 fail to sanitize sensitive information from Mattermost logs and clear data on server deletion which allows an attacker with access to the users system to gain access to potentially sensitive information via reading the application logs. A fix is available for...
PT-2025-47299
Name of the Vulnerable Software and Affected Versions WinPlus version 24.11.27 Description A stored Cross-site Scripting XSS issue exists in WinPlus version 24.11.27 due to insufficient validation of user-supplied data. This allows a remote attacker to send a malicious query to an authenticated...
The vulnerability of the Netty network programming framework lies in the lack of measures taken to clean data at the management level, allowing attackers to execute arbitrary SMTP commands.
The vulnerability of the Netty network programming framework is related to the lack of measures taken to sanitize data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary SMTP commands...
PT-2025-44778
Name of the Vulnerable Software and Affected Versions Car-Booking-System-PHP version 1.0 Description Car-Booking-System-PHP version 1.0 is susceptible to SQL Injection in the /carlux/sign-in.php file. The vulnerability exists due to insufficient input validation when processing user-supplied data...
SecureLearn - an Attack-Agnostic Defense for Multiclass Machine Learning against Data Poisoning Attacks
Data poisoning attacks are a potential threat to machine learning ML models, aiming to manipulate training datasets to disrupt their performance. Existing defenses are mostly designed to mitigate specific poisoning attacks or are aligned with particular ML algorithms. Furthermore, most defenses a...
EUVD-2019-0896
Malware in sbrugna...
EUVD-2021-11978
Malware in sbrugna...
EUVD-2021-25854
Malware in sbrugna...
EUVD-2021-22143
Malware in sbrugna...
EUVD-2019-0900
Malware in sbrugna...
EUVD-2020-28695
Malware in sbrugna...
EUVD-2018-6683
Malware in sbrugna...
EUVD-2018-10339
Malware in sbrugna...
EUVD-2021-11883
Malware in sbrugna...