GHSA-RCJJ-H6GH-JF3R

creationtimestamp| type| source ---|---|--- 2025-07-16 06:55:31+00:00| seen| https://gist.github.com/safer-bot/d9797f0aff4e030dd91427990bb06340 2025-07-16 19:02:07+00:00| seen| https://gist.github.com/safer-bot/a2afbfbe4d7c899c99feb8c00f281456...

CVE-2025-7620

CVE-2025-7620 concerns Digitware System Integration Corporation's cross-browser document creation component. The vulnerability allows remote code execution when a user visits a malicious site while the component is active, enabling download and execution of arbitrary programs on the system. Publi...

DSIC Cross-browser Components for Official Document Creation 安全漏洞

DSIC Cross-browser Components for Official Document Creation is a browser plug-in from Dewei DSIC Corporation of Taiwan, China. A security vulnerability exists in DSIC Cross-browser Components for Official Document Creation that originates from remote code execution and could lead to the download...

PT-2025-29416 · Digitware System Integration · Digitware System Integration Corporation Cross-Browser Document Creation

Name of the Vulnerable Software and Affected Versions: Digitware System Integration Corporation cross-browser document creation component affected versions not specified Description: The cross-browser document creation component developed by Digitware System Integration Corporation has a Remote...

CVE-2025-7620: Download of Code Without Integrity Check

The cross-browser document creation component produced by Digitware System Integration Corporation has a Remote Code Execution vulnerability. If a user visits a malicious website while the component is active, remote attackers can cause the system to download and execute arbitrary programs...

GHSA-9VFW-WX65-C872

creationtimestamp| type| source ---|---|--- 2025-07-07 19:47:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114813675213683577...

GHSA-6G6M-M6H5-W9GF

creationtimestamp| type| source ---|---|--- 2025-06-06 23:11:11+00:00| seen| https://gist.github.com/zhenthebuilder/796766496fd40b2efb4ad88864ee96cb...

CVE-2024-28956

creationtimestamp| type| source ---|---|--- 2025-05-12 15:18:15+00:00| seen| https://seclists.org/oss-sec/2025/q2/121 2025-05-12 17:32:53+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3loyiuejv6m2d 2025-05-12 18:02:37+00:00| seen|...

CVE-2025-3245

creationtimestamp| type| source ---|---|--- 2025-04-04 12:36:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10436 2025-04-04 13:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyicilhad2u 2025-04-04 16:20:54+00:00| seen|...

CVE-2025-30213: Improper Input Validation

Frappe is a full-stack web application framework. Prior to versions 14.91.0 and 15.52.0, a system user was able to create certain documents in a specific way that could lead to remote code execution. Versions 14.9.1 and 15.52.0 contain a patch for the vulnerability. There's no workaround; an...

CERTFR-2019-ALE-010

creationtimestamp| type| source ---|---|--- 2025-01-29 16:30:25+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvfdt7u7v2g...

CERTFR-2018-ALE-002

creationtimestamp| type| source ---|---|--- 2025-01-29 16:23:38+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvexo7ogf2g...

GHSA-MH2X-FCQH-FMQV

creationtimestamp| type| source ---|---|--- 2024-11-25 19:18:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113545203299807277...

XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled

Impact When document names are validated according to a name strategy disabled by default, XWiki is vulnerable to a reflected XSS attack in the page creation form. To reproduce, make sure that "Validate names before saving" is enabled in the administration under "Editing" - "Name strategies" and...

CVE-2023-45134 XWiki Platform XSS vulnerability from account in the create page form via template provider

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. org.xwiki.platform:xwiki-platform-web starting in version 3.1-milestone-1 and prior to 13.4-rc-1, org.xwiki.platform:xwiki-platform-web-templates prior to versions 14.10.2 and 15.5-rc-1, and...

PT-2023-29860 · Frappe · Frappe

Name of the Vulnerable Software and Affected Versions: Frappe versions prior to 14.49.0 Description: Frappe is a full-stack web application framework that uses Python and MariaDB on the server side and an integrated client side library. A malicious Frappe user with desk access could create...

XWiki Platform 注入漏洞

XWiki Platform is a suite of Wiki platforms from the XWiki Foundation in France for creating web collaboration applications. An injection vulnerability exists in XWiki Platform versions prior to 14.10.6, 15.2-rc-1 and prior to 15.2-rc-1, which can be exploited to inject XWiki syntax and Velocity...

URL Spoofing

firefox:edge is vulnerable to URL spoofing. When a JavaScript URL javascript: is evaluated and the result is a string, this string is parsed to create an HTML document, which is then presented. Previously, this document's URL as reported by the document.location property, for example was the...

Reportlab Server-Side Request Forgery Vulnerability

ReportLab is a Danish ReportLab company for the creation of data-driven PDF documents and custom vector graphics open source engine . A security vulnerability exists in Reportlab. The vulnerability stems from a server-side request forgery vulnerability that can be triggered by img tags. Currently...

[SECURITY] Fedora 32 Update: podofo-0.9.6-11.fc32

PoDoFo is a library to work with the PDF file format. The name comes from the first letter of PDF Portable Document Format. A few tools to work with PDF files are already included in the PoDoFo package. The PoDoFo library is a free, portable C++ library which includes classes to parse PDF files a...