Lucene search
+L

28 matches found

RedhatCVE
RedhatCVE
•added 2025/10/23 3:14 p.m.•17 views

CVE-2025-49946

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy Auto Login After Registration auto-login-after-registration allows Reflected XSS.This issue affects Auto Login After Registration: from n/a through = 1.0.0...

7.1CVSS6.4AI score0.00296EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/22 3:31 p.m.•16 views

EUVD-2025-35515

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy Auto Login After Registration auto-login-after-registration allows Reflected XSS.This issue affects Auto Login After Registration: from n/a through = 1.0.0...

5.9AI score0.00296EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/22 3:15 p.m.•17 views

CVE-2025-49946

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy Auto Login After Registration auto-login-after-registration allows Reflected XSS.This issue affects Auto Login After Registration: from n/a through = 1.0.0...

7.1CVSS0.00296EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•18 views

PT-2025-43207

Name of the Vulnerable Software and Affected Versions Cynob IT Consultancy Auto Login After Registration versions through 1.0.0 Description The Auto Login After Registration component contains a flaw related to improper input handling during web page generation, which allows for Reflected...

7.1CVSS6.3AI score0.00296EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•3 views

CVE-2025-49946: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy Auto Login After Registration auto-login-after-registration allows Reflected XSS.This issue affects Auto Login After Registration: from n/a through = 1.0.0...

7.1CVSS5.8AI score0.00296EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-30279

Malicious code in bioql PyPI...

6.7CVSS6.6AI score0.00326EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-4050

Malicious code in bioql PyPI...

7.1CVSS9.1AI score0.00142EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-9444

Malicious code in bioql PyPI...

7.1CVSS7.6AI score0.00312EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/16 2:15 p.m.•24 views

CVE-2024-12796

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Holistic IT, Consultancy Coop. Workcube ERP allows Reflected XSS. This issue affects Workcube ERP: from V12 - V14 before Cognitive...

5.3CVSS0.00259EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 1:25 a.m.•16 views

CVE-2022-25620

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Group Functionality of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause execute arbitrary codes on the vulnerable server. This issue affects: Profelis IT Consultancy SambaBox 4.0 versio...

9CVSS7.3AI score0.00444EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/03 9:30 p.m.•13 views

CVE-2025-31571

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy The Logo Slider the-logo-slider allows Reflected XSS.This issue affects The Logo Slider: from n/a through = 1.0.0...

7.1CVSS7.2AI score0.00312EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/01 9:15 p.m.•21 views

CVE-2025-31571

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy The Logo Slider the-logo-slider allows Reflected XSS.This issue affects The Logo Slider: from n/a through = 1.0.0...

7.1CVSS0.00312EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/01 8:58 p.m.•30 views

CVE-2025-31571 WordPress The Logo Slider plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy The Logo Slider the-logo-slider allows Reflected XSS.This issue affects The Logo Slider: from n/a through = 1.0.0...

7.1CVSS0.00312EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•10 views

CVE-2025-31571: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy The Logo Slider the-logo-slider allows Reflected XSS.This issue affects The Logo Slider: from n/a through = 1.0.0...

7.1CVSS5.8AI score0.00312EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/09 10:19 a.m.•10 views

CVE-2025-25139

Cross-Site Request Forgery CSRF vulnerability in Cynob IT Consultancy WP Custom Post RSS Feed wp-custom-post-rss-feed allows Stored XSS.This issue affects WP Custom Post RSS Feed: from n/a through = 1.0.0...

7.1CVSS7.2AI score0.00142EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/07 10:15 a.m.•19 views

CVE-2025-25139

Cross-Site Request Forgery CSRF vulnerability in Cynob IT Consultancy WP Custom Post RSS Feed wp-custom-post-rss-feed allows Stored XSS.This issue affects WP Custom Post RSS Feed: from n/a through = 1.0.0...

7.1CVSS0.00142EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/07 10:11 a.m.•27 views

CVE-2025-25139 WordPress WP Custom Post RSS Feed plugin <= 1.0.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Cynob IT Consultancy WP Custom Post RSS Feed wp-custom-post-rss-feed allows Stored XSS.This issue affects WP Custom Post RSS Feed: from n/a through = 1.0.0...

7.1CVSS0.00142EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/07 10:11 a.m.•65 views

CVE-2025-25139

CVE-2025-25139 concerns the WordPress plugin “WP Custom Post RSS Feed” (versions

7.1CVSS7.2AI score0.00142EPSS
SaveExploits0References1
NVD
NVD
•added 2022/03/30 3:15 p.m.•37 views

CVE-2022-25619

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in ping tool of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause run arbitrary code. This issue affects: Profelis IT Consultancy SambaBox 4.0 version 4.0 and prior versions on x86...

6.7CVSS0.00326EPSS
SaveExploits0References1
Prion
Prion
•added 2022/03/30 3:15 p.m.•26 views

Command injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in ping tool of Profelis IT Consultancy SambaBox allows AUTHENTICATED user to cause run arbitrary code. This issue affects: Profelis IT Consultancy SambaBox 4.0 version 4.0 and prior versions on x86...

4.6CVSS6.6AI score0.00326EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder