17164 matches found
PT-2025-39599
Name of the Vulnerable Software and Affected Versions WP Ticket Customer Service Software & Support Ticket System versions through 6.0.2 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, which can lead to Stored Cross-site...
PT-2025-39645
Name of the Vulnerable Software and Affected Versions Webbeyaz Website Design Website Software versions through 2025.07.14 Description A flaw exists in Webbeyaz Website Design Website Software that allows for Cross-Site Scripting XSS. This issue is due to improper neutralization of input during w...
CVE-2025-58915
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in emarket-design Request a Quote request-a-quote allows Stored XSS.This issue affects Request a Quote: from n/a through = 2.5.0...
CVE-2025-0663
A cross-tenant authentication vulnerability exists in multiple WSO2 products due to improper cryptographic design in Adaptive Authentication. A single cryptographic key is used across all tenants to sign authentication cookies, allowing a privileged user in one tenant to forge authentication...
Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to errors during initialization of variables, allowing an intruder to gain unauthorized access to protected information or execute arbitrary code.
The vulnerability of software for modeling, design, and drawing in AutoCAD is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or execute arbitrary code by sending a specially created DGN...
MAL-2025-47578 Malicious code in altoqitec-design-system-react (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in altoqitec-design-system-react (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-58915
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in emarket-design Request a Quote request-a-quote allows Stored XSS.This issue affects Request a Quote: from n/a through = 2.5.0...
CVE-2025-58915
CVE-2025-58915 affects multiple WordPress plugins from eMarket Design including YouTube Showcase . The vulnerability is an Authenticated Stored Cross-Site Scripting (XSS) issue in input handling during web page generation. The Wordfence report lists this as stored XSS with an attack surface invol...
WSO2 Identity Server 安全漏洞
WSO2 Identity Server IS is an identity server from the US-based WSO2 Inc. A security vulnerability exists in WSO2 Identity Server IS that stems from improper cryptographic design in adaptive authentication, which could lead to a cross-tenant authentication vulnerability...
PT-2025-39107
Name of the Vulnerable Software and Affected Versions Emarket-design YouTube Showcase versions through 3.5.0 Description The software contains a flaw related to improper input handling during web page generation, leading to a Cross-site Scripting XSS issue. Specifically, the vulnerability allows...
CVE-2025-59589
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PenciDesign Soledad soledad allows DOM-Based XSS.This issue affects Soledad: from n/a through = 8.6.8...
CVE-2025-59588
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in PenciDesign Soledad soledad allows PHP Local File Inclusion.This issue affects Soledad: from n/a through = 8.6.8...
CVE-2025-59583 WordPress Penci Filter Everything Plugin < 1.7 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PenciDesign Penci Filter Everything penci-filter-everything allows DOM-Based XSS.This issue affects Penci Filter Everything: from n/a through 1.7...
Blackmagic Design Web Presenter HD 安全漏洞
Blackmagic Design Web Presenter HD is a live video streaming appliance from Blackmagic Design, USA. A security vulnerability exists in Blackmagic Design Web Presenter HD version 3.3 that originates from an unauthenticated Telnet service exposing sensitive information, which could lead to live...
Blackmagic Design ATEM Mini Pro 安全漏洞
Blackmagic Design ATEM Mini Pro is a live video streaming device from Blackmagic Design, USA. A security vulnerability exists in the Blackmagic Design ATEM Mini Pro version 2.7 that originates from an undocumented Telnet service accepting unauthenticated commands in clear text, which could allow ...
PT-2025-39059
Name of the Vulnerable Software and Affected Versions PenciDesign Soledad versions through 8.6.8 Description A flaw exists in PenciDesign Soledad that allows for DOM-Based Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The vulnerability...
Janusec-Application-Gateway
It is an offensive tool for web application security testing. The repository contains a tool for testing web application security, specifically for identifying vulnerabilities in web applications. The tool is designed to test for various types of vulnerabilities, including SQL injection, cross-si...
Reproducing a Security Risk Assessment Using Computer Aided Design
Security risk assessment is essential in establishing the trustworthiness and reliability of modern systems. While various security risk assessment approaches exist, prevalent applications are "pen and paper" implementations that -- even if performed digitally using computers -- remain prone to...
