14 matches found
WS-2018-0092
Versions of hekto before 0.2.4 are vulnerable to open redirect when a domain name is used as part of the .html filename...
CVE-2025-64711
PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Starting in version 1.7.7 and prior to version 2.0.3, dragging a file whose filename contains HTML is reflected verbatim into the page via the drag-and-drop helper, so any user who drops a crafted file on...
FreeBSD : privatebin XSS (6e1105d8-bfc2-11f0-bb2b-ecf4bbefc954)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6e1105d8-bfc2-11f0-bb2b-ecf4bbefc954 advisory. privatebin reports: Dragging a file whose filename contains HTML is reflected verbatim into the page vi...
EUVD-2025-31566
Malicious code in bioql PyPI...
CVE-2025-11147 Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG
Reflected cross-site scripting XSS in Apt-Cacher-NG v3.2.1. The vulnerability allows malicious scripts XSS to be executed in “/html/.html”...
CVE-2025-11147
Reflected cross-site scripting XSS in Apt-Cacher-NG v3.2.1. The vulnerability allows malicious scripts XSS to be executed in “/html/.html”...
Linux Distros Unpatched Vulnerability : CVE-2022-45415
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When downloading an HTML file, if the title of the page was formatted as a filename with a malicious extension, Firefox may have saved the file with that...
Cross site scripting
jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter...
CVE-2018-3743
Open redirect in hekto =0.2.3 when target domain name is used as html filename on server...
CVE-2018-3743
Open redirect in hekto =0.2.3 when target domain name is used as html filename on server...
CVE-2018-3743: URL Redirection to Untrusted Site
Open redirect in hekto =0.2.3 when target domain name is used as html filename on server...
PT-2018-16165 · Hekto · Hekto
Name of the Vulnerable Software and Affected Versions: hekto versions prior to 0.2.4 Description: The issue is related to an open redirect when a domain name is used as part of the .html filename on the server. Recommendations: Update to version 0.2.4 or later...
