CVE-2025-64711

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Starting in version 1.7.7 and prior to version 2.0.3, dragging a file whose filename contains HTML is reflected verbatim into the page via the drag-and-drop helper, so any user who drops a crafted file on...

FreeBSD : privatebin XSS (6e1105d8-bfc2-11f0-bb2b-ecf4bbefc954)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6e1105d8-bfc2-11f0-bb2b-ecf4bbefc954 advisory. privatebin reports: Dragging a file whose filename contains HTML is reflected verbatim into the page vi...

EUVD-2025-31566

Malicious code in bioql PyPI...

CVE-2025-11147

Reflected cross-site scripting XSS in Apt-Cacher-NG v3.2.1. The vulnerability allows malicious scripts XSS to be executed in “/html/.html”...

CVE-2025-11147 Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG

Reflected cross-site scripting XSS in Apt-Cacher-NG v3.2.1. The vulnerability allows malicious scripts XSS to be executed in “/html/.html”...

Linux Distros Unpatched Vulnerability : CVE-2022-45415

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When downloading an HTML file, if the title of the page was formatted as a filename with a malicious extension, Firefox may have saved the file with that...

Cross site scripting

jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter...

CVE-2018-3743

Open redirect in hekto =0.2.3 when target domain name is used as html filename on server...

CVE-2018-3743

Open redirect in hekto =0.2.3 when target domain name is used as html filename on server...

PT-2018-16165 · Hekto · Hekto

Name of the Vulnerable Software and Affected Versions: hekto versions prior to 0.2.4 Description: The issue is related to an open redirect when a domain name is used as part of the .html filename on the server. Recommendations: Update to version 0.2.4 or later...

Open Redirect

hekto is vulnerable to open redirect attacks. The vulnerability exists when the html filename contains the target domain name to be redirected...

Directory traversal in DocBook

During conversion to HTML identifuers are used to form a filename without check for ../...