PT-2025-34772 · Selectzero · Selectzero Data Observability Platform

Name of the Vulnerable Software and Affected Versions: SelectZero Data Observability Platform versions prior to 2025.5.2 Description: The SelectZero Data Observability Platform is susceptible to HTML injection due to improper handling of user-supplied input in legacy UI fields. This allows for th...

CVE-2025-52219

SelectZero SelectZero Data Observability Platform before 2025.5.2 contains an Open Redirect vulnerability. Legacy UI fields can be used to create arbitrary external links via HTML Injection...

CVE-2025-52219: URL Redirection to Untrusted Site

SelectZero SelectZero Data Observability Platform before 2025.5.2 contains an Open Redirect vulnerability. Legacy UI fields can be used to create arbitrary external links via HTML Injection...

CVE-2025-52217: Improper Neutralization of Input During Web Page Generation

SelectZero Data Observability Platform before 2025.5.2 is vulnerable to HTML Injection. Legacy UI fields improperly handle user-supplied input, allowing injection of arbitrary HTML...

CVE-2025-5352 Environment Variable XSS in Analytics Component in lunary-ai/lunary

A critical stored Cross-Site Scripting XSS vulnerability exists in the Analytics component of lunary-ai/lunary versions up to 1.9.23, where the NEXTPUBLICCUSTOMSCRIPT environment variable is directly injected into the DOM using dangerouslySetInnerHTML without any sanitization or validation. This...

CVE-2025-54812

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HTML file. If untrusted data is used to retrieve the name of a logger, an attacker could theoretically inject HTML or Javascript in order t...

CVE-2025-54812

Improper Output Neutralization for Logs vulnerability in Apache Log4cxx. When using HTMLLayout, logger names are not properly escaped when writing out to the HTML file. If untrusted data is used to retrieve the name of a logger, an attacker could theoretically inject HTML or Javascript in order t...

IntelliJ IDEA < 2025.2 Multiple Vulnerabilities (macOS)

The version of IntelliJ IDEA installed on the remote host is prior to 2025.2. It is, therefore, affected by a multiple vulnerabilities as referenced in the advisory. - In JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote reference. CVE-2025-57727 - In JetBrains...

CVE-2025-50891

The server-side backend for Adform Site Tracking before 2025-08-28 allows attackers to inject HTML or execute arbitrary code via cookie hijacking. NOTE: a customer does not need to take any action to update locally installed software such as Adform Site Tracking 1.1...

CVE-2025-51989

The Evolution Consulting Kft. HRmaster module v235 is vulnerable to an HTML injection flaw within its registration interface. An attacker can inject malicious HTML tags into the "keresztnév" (firstname) field. This injected content is subsequently included in automated emails, potentially enablin...

CVE-2025-51989: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

HTML injection vulnerability in the registration interface in Evolution Consulting Kft. HRmaster module v235 allows an attacker to inject HTML tags into the "keresztnév" firstname field, which will be sent out in an email resulting in possible Phishing scenarios against any, previously not...

PT-2025-34291 · Unknown · Hrmaster Module

Name of the Vulnerable Software and Affected Versions: HRmaster module version 235 Description: An HTML injection flaw exists in the registration interface of the HRmaster module. An attacker can inject HTML tags into the keresztnév firstname field. This injected HTML is included in emails,...

Evolution Consulting HRmaster module security vulnerability

Evolution Consulting HRmaster module is a modular human resource management software from Evolution Consulting, Hungary. A security vulnerability exists in Evolution Consulting HRmaster module version v235, which originates from an HTML injection in the registration screen and may lead to phishin...

CVE-2025-57730

In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development feature...

CVE-2025-57730

In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development feature...

CVE-2025-57730

Summary: CVE-2025-57730 affects JetBrains IntelliJ IDEA prior to 2025.2, with an HTML injection vulnerability in the Remote Development feature. What’s affected: IntelliJ IDEA (before 2025.2); the issue is a HTML injection in the Remote Development workflow. Cause: underlying HTML injection vulne...

CVE-2025-57730

In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development feature...

CVE-2025-57730

In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development feature...

JetBrains IntelliJ IDEA security vulnerabilities

JetBrains IntelliJ IDEA is an integrated development environment IDE developed by JetBrains , designed to improve developer productivity and code quality , mainly for Java programming , but also supports Kotlin, Web, Spring and other languages and frameworks . JetBrains IntelliJ IDEA suffers from...

CVE-2025-57730: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development feature...