1243 matches found
CVE-2023-43662
ShokoServer is a media server which specializes in organizing anime. In affected versions the /api/Image/WithPath endpoint is accessible without authentication and is supposed to return default server images. The endpoint accepts the parameter serverImagePath, which is not sanitized in any way...
CVE-2023-41899
Home assistant is an open source home automation. In affected versions the hassio.addonstdin is vulnerable to a partial Server-Side Request Forgery where an attacker capable of calling this service e.g.: through GHSA-h2jp-7grc-9xpp may be able to invoke any Supervisor REST API endpoints with a PO...
CVE-2021-43862
jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31.1 contain a low impact and limited cross-site scripting XSS vulnerability. The code for XSS payload is always visible, but an attacker can use other techniques to hide the code...
CVE-2021-32783
Contour is a Kubernetes ingress controller using Envoy proxy. In Contour before version 1.17.1 a specially crafted ExternalName type Service may be used to access Envoy's admin interface, which Contour normally prevents from access outside the Envoy container. This can be used to shut down Envoy...
GHSA-CXFP-7PVR-95FF
creationtimestamp| type| source ---|---|--- 2025-05-21 17:43:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17158...
GHSA-44FP-W29J-9VJ5
creationtimestamp| type| source ---|---|--- 2025-05-19 19:39:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16918...
GHSA-9XHX-P3C5-P4V6
creationtimestamp| type| source ---|---|--- 2025-05-15 16:35:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16533...
GHSA-9CWV-PXCR-HFJC
creationtimestamp| type| source ---|---|--- 2025-05-14 07:30:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16291...
CVE-2025-47280 Umbraco.Forms has HTML injection vulnerability in 'Send email' workflow
Umbraco Forms is a form builder that integrates with the Umbraco content management system. Starting in the 7.x branch and prior to versions 13.4.2 and 15.1.2, the 'Send email' workflow does not HTML encode the user-provided field values in the sent email message, making any form with this workfl...
GHSA-CH37-53V3-M4CM
creationtimestamp| type| source ---|---|--- 2025-04-29 05:11:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13790...
GHSA-6JGM-J7H2-2FQG
creationtimestamp| type| source ---|---|--- 2025-04-28 23:10:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13751...
GHSA-HJ4J-923H-927J
creationtimestamp| type| source ---|---|--- 2025-04-25 16:07:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13452...
GHSA-G722-CM3H-8WRX
creationtimestamp| type| source ---|---|--- 2025-04-23 19:05:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13126...
GHSA-835J-6976-46JX
creationtimestamp| type| source ---|---|--- 2025-04-15 17:55:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11869...
GHSA-5XQW-8HWV-WG92
creationtimestamp| type| source ---|---|--- 2025-04-09 22:48:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11180...
GHSA-FMHH-RW3H-785M
creationtimestamp| type| source ---|---|--- 2025-04-08 15:47:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10928...
Malicious code in @hongfangze/progress (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30ce725234e86c5968568e8c66969c293462123d379f788087b8a0a5d8ebed31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-FCFQ-M8P6-GW56
creationtimestamp| type| source ---|---|--- 2025-03-31 17:31:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9716...
