CVE-2025-41088

CVE-2025-41088 affects Xibo CMS v4.1.2. A stored XSS flaw arises from insufficient validation of user input, exploited by creating a template in Templates, adding a text element in Global Elements, then altering the Text field with malicious payload. Impact described as cross-site script executio...

CVE-2025-41088 Stored Cross-Site Scripting (XSS) in CMS

Stored Cross-Site Scripting XSS in Xibo Signage's Xibo CMS v4.1.2, due to a lack of proper validation of user input. To exploit the vulnerability, the attacker must create a template in the 'Templates' section, then add a text element in the 'Global Elements' section, and finally modify the 'Text...

imagemagick:encoder_jxl_fuzzer: Global-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char>

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5958109588946944 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderjxlfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Global-buffer-overflow READ 16...

CVE-2025-11477

A security flaw has been discovered in SourceCodester Wedding Reservation Management System 1.0. This vulnerability affects unknown code of the file /global.php. The manipulation of the argument User results in sql injection. The attack may be launched remotely. The exploit has been released to t...

OSV-2025-827 Global-buffer-overflow in void jxl::N_SSE4::WriteToOutputStage::StoreUnsignedRow<unsigned char>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=450328034 Crash type: Global-buffer-overflow READ 16 Crash state: void jxl::NSSE4::WriteToOutputStage::StoreUnsignedRow jxl::NSSE4::WriteToOutputStage::OutputBuffers jxl::NSSE4::WriteToOutputStage::ProcessRow...

PT-2025-43661

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=450328034 Crash type: Global-buffer-overflow READ 16 Crash state: void jxl::N SSE4::WriteToOutputStage::StoreUnsignedRow jxl::N SSE4::WriteToOutputStage::OutputBuffers jxl::N SSE4::WriteToOutputStage::ProcessRow...

PT-2025-41536

Name of the Vulnerable Software and Affected Versions Xibo CMS version 4.1.2 Description A stored Cross-Site Scripting XSS issue exists due to insufficient validation of user input. An attacker can exploit this by creating a template in the 'Templates' section, adding a text element in the 'Globa...

CVE-2025-41088: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting XSS in Xibo Signage's Xibo CMS v4.1.2, due to a lack of proper validation of user input. To exploit the vulnerability, the attacker must create a template in the 'Templates' section, then add a text element in the 'Global Elements' section, and finally modify the 'Text...

EUVD-2025-33383

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in Global Search that, when visited by another user, enables the attacker to execute commands with the target's permissions,...

CVE-2025-59984

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in Global Search that, when visited by another user, enables the attacker to execute commands with the target's permissions,...

CVE-2025-59984

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in Global Search that, when visited by another user, enables the attacker to execute commands with the target's permissions,...

CVE-2025-59984 Junos Space: Global Search is vulnerable to reflected cross-site script injection

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in Global Search that, when visited by another user, enables the attacker to execute commands with the target's permissions,...

CVE-2025-59984 Junos Space: Global Search is vulnerable to reflected cross-site script injection

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in Global Search that, when visited by another user, enables the attacker to execute commands with the target's permissions,...

CVE-2025-59984

CVE-2025-59984 affects Juniper Networks Junos Space prior to version 24.1R4. It is an Improper Neutralization of Input During Web Page Generation (XSS) vulnerability that lets an attacker inject script tags in Global Search; when a user visits the page, commands could execute with the target’s pe...

libjxl:djxl_fuzzer: Global-buffer-overflow in void jxl::N_SSE4::WriteToOutputStage::StoreUnsignedRow<unsigned char>

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5327810488238080 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Global-buffer-overflow READ 16 Crash Address:...

PT-2025-41420

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 24.1R4 Description An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue exists in Juniper Networks Junos Space. This allows an attacker to inject script tags...

CVE-2025-59984: Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in Global Search that, when visited by another user, enables the attacker to execute commands with the target's permissions,...

CVE-2025-11477

A security flaw has been discovered in SourceCodester Wedding Reservation Management System 1.0. This vulnerability affects unknown code of the file /global.php. The manipulation of the argument User results in sql injection. The attack may be launched remotely. The exploit has been released to t...

EUVD-2025-33160

A security flaw has been discovered in SourceCodester Wedding Reservation Management System 1.0. This vulnerability affects unknown code of the file /global.php. The manipulation of the argument User results in sql injection. The attack may be launched remotely. The exploit has been released to t...

CVE-2025-11477

Summary: CVE-2025-11477 affects SourceCodester Wedding Reservation Management System 1.0. The flaw occurs in /global.php where manipulation of the User parameter enables a SQL injection. The vulnerability can be exploited remotely and exploits have been released publicly. Multiple connected sourc...