PT-2025-38858

Name of the Vulnerable Software and Affected Versions xnau webdesign Participants Database versions through 2.7.6.3 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means malicious script...

PT-2025-39056

Name of the Vulnerable Software and Affected Versions PenciDesign Penci Portfolio versions through 3.5 Description The software contains a flaw related to improper input handling during web page creation, leading to a DOM-Based Cross-site Scripting XSS condition. This allows for potential malicio...

CVE-2024-48851

Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.A remote code execution is possible due to an improper input validation. This issue affects FLXEON: through 9.3.5...

CVE-2025-8664

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Saysis Computer Systems Trade Ltd. Co. StarCities E-Municipality Management allows Cross-Site Scripting XSS. This issue affects StarCities E-Municipality Management: before 20250825...

CVE-2025-8664 XSS in Saysis Computer Systems' StarCities

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Saysis Computer Systems Trade Ltd. Co. StarCities E-Municipality Management allows Cross-Site Scripting XSS. This issue affects StarCities E-Municipality Management: before 20250825...

CVE-2025-8664

The CVE-2025-8664 entry concerns StarCities E-Municipality Management from Saysis Computer Systems Trade Ltd. Co. with an XSS vulnerability due to improper input neutralization during web page generation. Affected versions are before 20250825. The PT-2025-38542 entry provides a remediation note t...

CVE-2025-58114

Improper Input Validation vulnerability in Hallo Welt! GmbH BlueSpice Extension:CognitiveProcessDesigner allows Cross-Site Scripting XSS.This issue affects BlueSpice: from 5 through 5.1.1...

CVE-2025-10155

An Improper Input Validation vulnerability in the scanning logic of mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass pickle files security checks by supplying a standard pickle file with a PyTorch-related file extension. When the pickle file incorrectly...

PT-2025-38527

Name of the Vulnerable Software and Affected Versions Vizly Web Design Real Estate Packages versions prior to 5.1 Description The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, also known as Cross-site Scripting XSS. This issue allows for Content...

PT-2025-38542

Name of the Vulnerable Software and Affected Versions Saysis Computer Systems Trade Ltd. Co. StarCities E-Municipality Management versions prior to 20250825 Description The software contains an Improper Neutralization of Input During Web Page Generation, which allows for Cross-Site Scripting XSS...

CVE-2024-12796

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Holistic IT, Consultancy Coop. Workcube ERP allows Reflected XSS.This issue affects Workcube ERP: from V12 - V14 before Cognitive...

CVE-2025-10207 Authenticated File Disclosure/Delete

Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5...

CVE-2024-48851

CVE-2024-48851 affects ABB FLXEON controllers (through version 9.3.5). The issue arises from improper input validation in the FLXEON.A component, enabling remote code execution. Connected sources (ICS advisory from CISA, vendor/Red Hat/CNNVD entries) confirm remote code execution as the impact. N...

CVE-2025-0547

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Paraşüt Software Bizmu allows Cross-Site Scripting XSS. This issue affects Bizmu: from 2.27.0 through 20250212...

PT-2025-38312

Name of the Vulnerable Software and Affected Versions ABB FLXEON versions through 9.3.5 Description An improper validation of specified type of input issue exists in ABB FLXEON. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-38315

Name of the Vulnerable Software and Affected Versions Logo Software Retail Sales Management versions through 20250918 Logo Software Diva versions through 4.56.00.00 Description A SQL injection issue exists in Logo Software Retail Sales Management and Diva due to improper neutralization of special...

Exploit for Improper Input Validation in Bsdi Bsd_Os

This repository appears to be a collection of old CVE Common Vulnerabilities and Exposures entries from 1999. The repository contains a series of markdown files, each describing a specific vulnerability, along with links to GitHub repositories that may contain proof-of-concept POC code or other...

CVE-2025-0879

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Shopside Software Shopside App allows Cross-Site Scripting XSS. This issue requires high privileges. This issue affects Shopside App: before 17.02.2025...

GHSA-J424-MC44-F4HJ Duplicate Advisory: Picklescan Bypass is Possible via File Extension Mismatch

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jgw4-cr84-mqxg. This link is maintained to preserve external references. Original Description An Improper Input Validation vulnerability in the scanning logic of mmaitre314 picklescan versions up to and includin...

Duplicate Advisory: Picklescan Bypass is Possible via File Extension Mismatch

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jgw4-cr84-mqxg. This link is maintained to preserve external references. Original Description An Improper Input Validation vulnerability in the scanning logic of mmaitre314 picklescan versions up to and includin...