Lucene search
K

24 matches found

RedhatCVE
RedhatCVE
added 2025/10/23 3:14 p.m.3 views

CVE-2025-49946

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy Auto Login After Registration auto-login-after-registration allows Reflected XSS.This issue affects Auto Login After Registration: from n/a through = 1.0.0...

7.1CVSS6.4AI score0.00029EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/22 3:31 p.m.2 views

EUVD-2025-35515

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy Auto Login After Registration auto-login-after-registration allows Reflected XSS.This issue affects Auto Login After Registration: from n/a through = 1.0.0...

5.9AI score0.00029EPSS
Exploits0References2
NVD
NVD
added 2025/10/22 3:15 p.m.2 views

CVE-2025-49946

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy Auto Login After Registration auto-login-after-registration allows Reflected XSS.This issue affects Auto Login After Registration: from n/a through = 1.0.0...

7.1CVSS0.00029EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/22 12:0 a.m.3 views

PT-2025-43207

Name of the Vulnerable Software and Affected Versions Cynob IT Consultancy Auto Login After Registration versions through 1.0.0 Description The Auto Login After Registration component contains a flaw related to improper input handling during web page generation, which allows for Reflected...

7.1CVSS6.3AI score0.00029EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-30279

Malicious code in bioql PyPI...

6.7CVSS6.7AI score0.00144EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-4050

Malicious code in bioql PyPI...

7.1CVSS9.1AI score0.0011EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2025-9444

Malicious code in bioql PyPI...

7.1CVSS7.6AI score0.00257EPSS
Exploits0References2
NVD
NVD
added 2025/09/16 2:15 p.m.3 views

CVE-2024-12796

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Holistic IT, Consultancy Coop. Workcube ERP allows Reflected XSS. This issue affects Workcube ERP: from V12 - V14 before Cognitive...

5.3CVSS0.00051EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 1:25 a.m.4 views

CVE-2022-25620

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Group Functionality of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause execute arbitrary codes on the vulnerable server. This issue affects: Profelis IT Consultancy SambaBox 4.0 versio...

9CVSS7.3AI score0.00536EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/03 9:30 p.m.3 views

CVE-2025-31571

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy The Logo Slider the-logo-slider allows Reflected XSS.This issue affects The Logo Slider: from n/a through = 1.0.0...

7.1CVSS7.2AI score0.00257EPSS
Exploits0References1
NVD
NVD
added 2025/04/01 9:15 p.m.6 views

CVE-2025-31571

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy The Logo Slider the-logo-slider allows Reflected XSS.This issue affects The Logo Slider: from n/a through = 1.0.0...

7.1CVSS0.00257EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/01 8:58 p.m.9 views

CVE-2025-31571 WordPress The Logo Slider plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy The Logo Slider the-logo-slider allows Reflected XSS.This issue affects The Logo Slider: from n/a through = 1.0.0...

7.1CVSS0.00257EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/09 10:19 a.m.2 views

CVE-2025-25139

Cross-Site Request Forgery CSRF vulnerability in Cynob IT Consultancy WP Custom Post RSS Feed wp-custom-post-rss-feed allows Stored XSS.This issue affects WP Custom Post RSS Feed: from n/a through = 1.0.0...

7.1CVSS7.2AI score0.0011EPSS
Exploits0References1
NVD
NVD
added 2025/02/07 10:15 a.m.7 views

CVE-2025-25139

Cross-Site Request Forgery CSRF vulnerability in Cynob IT Consultancy WP Custom Post RSS Feed wp-custom-post-rss-feed allows Stored XSS.This issue affects WP Custom Post RSS Feed: from n/a through = 1.0.0...

7.1CVSS0.0011EPSS
Exploits0References1
CVE
CVE
added 2025/02/07 10:11 a.m.44 views

CVE-2025-25139

CVE-2025-25139 concerns the WordPress plugin “WP Custom Post RSS Feed” (versions

7.1CVSS7.2AI score0.0011EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/07 10:11 a.m.10 views

CVE-2025-25139 WordPress WP Custom Post RSS Feed plugin <= 1.0.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Cynob IT Consultancy WP Custom Post RSS Feed wp-custom-post-rss-feed allows Stored XSS.This issue affects WP Custom Post RSS Feed: from n/a through = 1.0.0...

7.1CVSS0.0011EPSS
Exploits0References1
NVD
NVD
added 2022/03/30 3:15 p.m.14 views

CVE-2022-25619

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in ping tool of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause run arbitrary code. This issue affects: Profelis IT Consultancy SambaBox 4.0 version 4.0 and prior versions on x86...

6.7CVSS0.00144EPSS
Exploits0References1
Prion
Prion
added 2022/03/30 3:15 p.m.8 views

Command injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in ping tool of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause run arbitrary code. This issue affects: Profelis IT Consultancy SambaBox 4.0 version 4.0 and prior versions on x86...

4.6CVSS6.6AI score0.00144EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/03/30 2:55 p.m.74 views

CVE-2022-25619

CVE-2022-25619 : Affected product is Profelis IT Consultancy SambaBox (x86) version 4.0 and earlier. The root cause is improper neutralization in the ping utility, enabling an AUTHENTICATED user to execute arbitrary code via a command injection. The vulnerability is documented across sources (NVD...

6.7CVSS5.5AI score0.00144EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/03/30 2:55 p.m.11 views

CVE-2022-25619 Authenticated Command Injection to RCE

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in ping tool of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause run arbitrary code. This issue affects: Profelis IT Consultancy SambaBox 4.0 version 4.0 and prior versions on x86...

3.8CVSS6.8AI score0.00144EPSS
Exploits0References1
Rows per page
Query Builder