Cross-site Scripting (XSS)

Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the printallbugpageword.php process. An attacker can execute arbitrary JavaScript in the context of another user by uploading an image attachment with a specially...

CVE-2005-1812

Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long 1 filename or 2 transfer mode string in a Read Request RRQ or Write Request WRQ packet...

EUVD-2020-3365

Malware in sbrugna...

EUVD-2013-6872

Malware in sbrugna...

EUVD-2010-4237

Malware in sbrugna...

EUVD-2019-6114

Malware in sbrugna...

EUVD-2015-0942

Malware in sbrugna...

EUVD-2005-0193

Malware in sbrugna...

EUVD-2007-6150

Malware in sbrugna...

EUVD-2011-0488

Malware in sbrugna...

EUVD-2005-3007

Malware in sbrugna...

EUVD-2006-0233

Malware in sbrugna...

CVE-2025-11337

The CVE-2025-11337 issue affects Four-Faith Water Conservancy Informatization Platform (versions up to 2.2). A path traversal vulnerability exists in the handling of the fileName parameter in endpoints such as /aloneReport/index.do/../../aloneReport/download.do and /othersusrlogout.do, enabling r...

EUVD-2022-44922

Malicious code in bioql PyPI...

EUVD-2023-0518

Malicious code in bioql PyPI...

CVE-2023-38191

An issue was discovered in SuperWebMailer 9.00.0.01710. It allows spamtestexternal.php XSS via a crafted filename...

CVE-2024-10912

A Denial of Service DoS vulnerability exists in the file upload feature of lm-sys/fastchat version 0.2.36. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large...

CVE-2024-12063 Denial of Service in imartinez/privategpt

A Denial of Service DoS vulnerability exists in the file upload feature of imartinez/privategpt version v0.6.2. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large...

CVE-2024-12070

CVE-2024-12070 concerns a DoS vulnerability in the file upload feature of haotian-liu/llava (Release v1.2.0 / LLaVA-1.6). The root cause is improper handling of form-data with an excessively large filename in the file upload request, which can overwhelm the server and render it unresponsive. Expl...

CVE-2024-12074

CVE-2024-12074 describes a DoS in automatic1111/stable-diffusion-webui 1.10.0 caused by improper handling of form-data with a very large filename in file uploads. The vulnerability, exploitable without authentication, can render the server unresponsive and unavailable to legitimate users, indicat...