EUVD-2025-28829

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2019-7337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3 as the view 'events' events.php insecurely displays the limit parameter value, without...

CVE-2025-9234

A vulnerability was detected in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file maintenanceevents.shtm. The manipulation of the argument Alias results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used...

Scada-LTS 安全漏洞

Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A security vulnerability exists in Scada-LTS version 2.7.8.1 and earlier, which stems from an incorrect manipulation of the parameter Alias in the file maintenanceevents.shtm, resulting in a cross-site...

Campcodes Complete Web-Based School Management System 跨站脚本漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which originates from a cross-site scripting vulnerability in...

Campcodes Complete Web-Based School Management System 跨站脚本漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which stems from a cross-site scripting vulnerability in the...

Events Made Easy < 2.2.81 - Unauthenticated SQLi

The plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection Obtain a valid nonce visit the "Events" page, default is /events/, and extract it from the source while looking for...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I'm giving a keynote address at the Cybersecurity and Data Privacy Law virtual conference on September 9, 2020. The list is maintained on this page...

ticketderby.com XSS vulnerability

Open Bug Bounty ID: OBB-655900 Description| Value ---|--- Affected Website:| ticketderby.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

brantfordclub.ca XSS vulnerability

Open Bug Bounty ID: OBB-618687 Description| Value ---|--- Affected Website:| brantfordclub.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

regiscollege.edu XSS vulnerability

Open Bug Bounty ID: OBB-556159 Description| Value ---|--- Affected Website:| regiscollege.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

isicad.net XSS vulnerability

Vulnerable URL: http://isicad.net/events.php?id=9alert/OPENBUGBOUNTY/...

lakesuperiorstewardship.org XSS vulnerability

Vulnerable URL: http://lakesuperiorstewardship.org/events.php?cmonth=5=363=2017"alert/OPENBUGBOUNTY/...

velsvidyashram.com XSS vulnerability

Vulnerable URL: http://www.velsvidyashram.com/gallery-events2013.htm!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 31.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

armorama.com XSS vulnerability

Vulnerable URL: http://armorama.com/events/month.php?catid=2'%22alert/OPENBUGBOUNTY/...

kramerav.co.nz XSS vulnerability

Vulnerable URL: http://www.kramerav.co.nz/events.asp?q=2" Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 28603223 VIP website status:| No Check...

optum.com XSS vulnerability

Vulnerable URL: https://www.optum.com/news-events/events.html?type=events...

optum.com XSS vulnerability

Vulnerable URL: https://www.optum.com/news-events/events.html?type=events=...

gatherandhunt.co.nz XSS vulnerability

Vulnerable URL: http://gatherandhunt.co.nz/events/?m=12=2015'%22%26%25promptString.fromCharCode88, 83, 83, 80, 79, 83, 69, 68...

robert.com XSS vulnerability

Vulnerable URL: http://robert.com/events.php?pageid=1=68" Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13720177 Google Pagerank| 3 VIP website status:| ...