EUVD-2018-4608

Malware in sbrugna...

EUVD-2018-4605

Malware in sbrugna...

EUVD-2011-2270

Malware in sbrugna...

EUVD-2020-6748

Malware in sbrugna...

EUVD-2013-1564

Malware in sbrugna...

EUVD-2012-0568

Malware in sbrugna...

EUVD-2014-0426

Malware in sbrugna...

EUVD-2009-0995

Malware in sbrugna...

EUVD-2011-3491

Malware in sbrugna...

EUVD-2012-3091

Malware in sbrugna...

EUVD-2004-2426

Malware in sbrugna...

EUVD-2025-15451

Malicious code in bioql PyPI...

EUVD-2025-5866

Malicious code in bioql PyPI...

CVE-2025-59832

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, there is a stored XSS vulnerability in the ticket comment editor. A low-privilege authenticated user could run arbitrary JavaScript in an admin’s browser, exfiltrate the admin’s cookies/CSRF token, an...

CVE-2025-59525

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, improper sanitization across the application allows XSS via uploaded SVG and via allowed , which can be chained to execute JavaScript whenever users view impacted content e.g., announcements. This can...

CVE-2025-48867

Horilla is a free and open source Human Resource Management System HRMS. A stored cross-site scripting XSS vulnerability in Horilla HRM 1.3.0 allows authenticated admin or privileged users to inject malicious JavaScript payloads into multiple fields in the Project and Task modules. These payloads...

CVE-2025-59832

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, there is a stored XSS vulnerability in the ticket comment editor. A low-privilege authenticated user could run arbitrary JavaScript in an admin’s browser, exfiltrate the admin’s cookies/CSRF token, an...

CVE-2025-59832 Horrila Stored XSS Vulnerability via Ticket Comment section

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, there is a stored XSS vulnerability in the ticket comment editor. A low-privilege authenticated user could run arbitrary JavaScript in an admin’s browser, exfiltrate the admin’s cookies/CSRF token, an...

CVE-2025-59832 Horrila Stored XSS Vulnerability via Ticket Comment section

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, there is a stored XSS vulnerability in the ticket comment editor. A low-privilege authenticated user could run arbitrary JavaScript in an admin’s browser, exfiltrate the admin’s cookies/CSRF token, an...

PT-2025-39398

Name of the Vulnerable Software and Affected Versions Horilla versions prior to 1.4.0 Description Horilla is a Human Resource Management System HRMS. A stored cross-site scripting XSS issue exists in the ticket comment editor for versions prior to 1.4.0. An authenticated user with limited...