1726 matches found
WordPress Booking Manager plugin cross-site scripting vulnerability
WordPress Booking Manager plugin is a tool for managing appointments and schedules, supporting features such as synchronization with external ICS calendars, importing events and exporting booking data. A cross-site scripting vulnerability exists in the WordPress Booking Manager plugin, which stem...
CVE-2025-58083
creationtimestamp| type| source ---|---|--- 2025-11-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-08 2025-11-15 00:02:05+00:00| seen| https://infosec.exchange/users/offseq/statuses/115550776421341345...
CVE-2025-59780
creationtimestamp| type| source ---|---|--- 2025-11-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-08...
CVE-2025-40816
creationtimestamp| type| source ---|---|--- 2025-11-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-13...
CVE-2025-64307
creationtimestamp| type| source ---|---|--- 2025-11-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-04...
*Rockwell Automation AADvance-Trusted SIS Workstation *
RISK EVALUATION Successful exploitation of this vulnerability may allow remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all control system devices...
About Cross Site Scripting – Zimbra Collaboration (CVE-2025-27915) vulnerability
About Cross Site Scripting - Zimbra Collaboration CVE-2025-27915 vulnerability. Zimbra Collaboration is a collaboration software suite, somewhat similar to Microsoft Exchange. Exploiting this vulnerability in the web mail client Classic Web Client allows an unauthenticated attacker to execute...
CVE-2025-58428
creationtimestamp| type| source ---|---|--- 2025-10-23 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-03 2025-10-23 22:00:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3vecc2c2w2e 2025-10-24 04:34:20+00:00| seen|...
CVE-2025-58078
creationtimestamp| type| source ---|---|--- 2025-10-23 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01 2025-10-23 23:28:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3vj7hdql22c...
CVE-2025-11757
creationtimestamp| type| source ---|---|--- 2025-10-21 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-294-05 2025-10-21 20:01:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3q4oiytrg2m...
Zimbra Collaboration 10.1.x < 10.1.5 Stored Cross-Site Scripting
According to its banner, the version of Zimbra Collaboration running on the remote host is 10.0.x prior to 10.0.13 or 10.1.x prior to 10.1.5. It is, therefore, affected by a Stored Cross-Site Scripting XSS vulnerability due to insufficient sanitization of HTML content in ICS files. Note that the...
Zimbra Collaboration 10.0.x < 10.0.13 Stored Cross-Site Scripting
According to its banner, the version of Zimbra Collaboration running on the remote host is 10.0.x prior to 10.0.13 or 10.1.x prior to 10.1.5. It is, therefore, affected by a Stored Cross-Site Scripting XSS vulnerability due to insufficient sanitization of HTML content in ICS files. Note that the...
CVE-2025-9178
creationtimestamp| type| source ---|---|--- 2025-10-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-287-01...
EUVD-2016-6759
Malware in sbrugna...
EUVD-2020-29831
Malware in sbrugna...
EUVD-2016-6758
Malware in sbrugna...
EUVD-2016-6760
Malware in sbrugna...
Zimbra Zero-Day Exploited to Target Brazilian Military via Malicious ICS Files
A now patched security vulnerability in Zimbra Collaboration was exploited as a zero-day earlier this year in cyber attacks targeting the Brazilian military. Tracked as CVE-2025-27915 CVSS score: 5.4, the vulnerability is a stored cross-site scripting XSS vulnerability in the Classic Web Client...