268 matches found
CVE-2024-13992
Nagios XI versions prior to 2024R1.1 is vulnerable to a cross-site scripting XSS when a user visits the "missing page" 404 page after following a link from another website. The vulnerable component, page-missing.php, fails to properly validate or escape user-supplied input, allowing an attacker t...
CVE-2024-13992 Nagios XI < 2024R1.1 XSS via Missing Page / 404
Nagios XI versions prior to 2024R1.1 is vulnerable to a cross-site scripting XSS when a user visits the "missing page" 404 page after following a link from another website. The vulnerable component, page-missing.php, fails to properly validate or escape user-supplied input, allowing an attacker t...
CVE-2025-52664
creationtimestamp| type| source ---|---|--- 2025-10-31 01:42:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4hdxjtd362k...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal due to the lack of path or file type validation when processing a docx file containing an image with an external link r:link attribute instead of embedded r:embed. The library resolves the URI to a file path and afte...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal due to the lack of path or file type validation when processing a docx file containing an image with an external link r:link attribute instead of embedded r:embed. The library resolves the URI to a file path and afte...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal due to the lack of path or file type validation when processing a docx file containing an image with an external link r:link attribute instead of embedded r:embed. The library resolves the URI to a file path and afte...
Mattermost Desktop App 安全漏洞
Mattermost Desktop App is a messaging desktop application from Mattermost USA. A security vulnerability exists in Mattermost Desktop App version 5.13.0 and earlier, which originates from an unauthenticated external URL and could allow an attacker to crash the application by sending a specially...
EUVD-2017-10004
Malware in sbrugna...
EUVD-2017-4496
Malware in sbrugna...
EUVD-2010-2050
Malware in sbrugna...
EUVD-2022-5594
Malicious code in bioql PyPI...
EUVD-2023-32300
Malicious code in bioql PyPI...
EUVD-2023-53694
Malicious code in bioql PyPI...
EUVD-2025-24213
Malicious code in bioql PyPI...
EUVD-2023-53693
Malicious code in bioql PyPI...
CVE-2025-57318
creationtimestamp| type| source ---|---|--- 2025-09-25 05:23:42+00:00| seen| https://gist.github.com/Darkcrai86/dd2d95d37934e5b8a53d18e11401236a...
Lobe Chat Desktop vulnerable to Remote Code Execution via XSS in Chat Messages
Summary We identified a cross-site scripting XSS vulnerability when handling chat message in lobe-chat that can be escalated to remote code execution on the user’s machine. Any party capable of injecting content into chat messages, such as hosting a malicious page for prompt injection, operating ...
CVE-2025-42918
creationtimestamp| type| source ---|---|--- 2025-09-11 13:37:23+00:00| seen| https://vulnerability.circl.lu/bundle/43ff9e04-da8f-45fe-a06a-e8f9b84a2d14...
CVE-2025-43886
creationtimestamp| type| source ---|---|--- 2025-09-10 17:20:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyiqlwltpw2j...
Linux Distros Unpatched Vulnerability : CVE-2023-28636
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Starting in version 0.60 and prior to versions 9.5.13 and 10.0.7, a vulnerability allows an administrat...