EUVD-2026-78221

A flaw has been found in michaelliao itranswarp up to 2.19. The impacted element is the function Markdown.toHtml of the file Markdown.java of the component Page Content Rendering. This manipulation causes cross site scripting. The attack may be initiated remotely. The exploit has been published a...

CVE-2026-90835

A flaw has been found in michaelliao itranswarp up to 2.19. The impacted element is the function Markdown.toHtml of the file Markdown.java of the component Page Content Rendering. This manipulation causes cross site scripting. The attack may be initiated remotely. The exploit has been published a...

CVE-2026-90835

A cross-site scripting (XSS) vulnerability exists in michaelliao itranswarp (up to version 2.19), specifically in the function Markdown.toHtml within Markdown.java under the Page Content Rendering component. The flaw allows a remote attacker to inject scripts via crafted page content. The exploit...

CVE-2026-90835 michaelliao itranswarp Page Content Rendering Markdown.java Markdown.toHtml cross site scripting

A flaw has been found in michaelliao itranswarp up to 2.19. The impacted element is the function Markdown.toHtml of the file Markdown.java of the component Page Content Rendering. This manipulation causes cross site scripting. The attack may be initiated remotely. The exploit has been published a...

EUVD-2025-25346

Malicious code in bioql PyPI...

EUVD-2025-13434

Malicious code in bioql PyPI...

CVE-2025-28041

Incorrect access control in the doFilter function of itranswarp up to 2.19 allows attackers to access sensitive components without authentication...

CVE-2025-28041

Incorrect access control in the doFilter function of itranswarp up to 2.19 allows attackers to access sensitive components without authentication...

CVE-2025-28041

Incorrect access control in the doFilter function of itranswarp up to 2.19 allows attackers to access sensitive components without authentication...

iTranswarp 安全漏洞

iTranswarp is a full-featured CMS by Crypto Michael Individual Developers. A security vulnerability exists in iTranswarp 2.19 and earlier versions that stems from improper access control of the doFilter function, which could lead to unauthenticated access to sensitive components...

CVE-2025-28041

The CVE-2025-28041 entry concerns iTranswarp (CMS) versions up to 2.19 with a root cause of incorrect access control in the doFilter function. This allows unauthenticated actors to access sensitive components. Public reports from multiple sources (including Red Hat and CNNVD) confirm the same des...

PT-2025-34118 · Unknown · Itranswarp

Name of the Vulnerable Software and Affected Versions: itranswarp versions up to 2.19 Description: Incorrect access control in the doFilter function allows attackers to access sensitive components without authentication. Recommendations: Update itranswarp to a version later than 2.19...

CVE-2025-28041

Incorrect access control in the doFilter function of itranswarp up to 2.19 allows attackers to access sensitive components without authentication...

CVE-2025-28041

Incorrect access control in the doFilter function of itranswarp up to 2.19 allows attackers to access sensitive components without authentication...

CVE-2025-45607

An issue in the component /manage/ of itranswarp v2.19 allows attackers to bypass authentication via a crafted request...

CVE-2025-45607

An issue in the component /manage/ of itranswarp v2.19 allows attackers to bypass authentication via a crafted request...

CVE-2025-45607

An issue in the component /manage/ of itranswarp v2.19 allows attackers to bypass authentication via a crafted request...

CVE-2025-45607

An issue in the component /manage/ of itranswarp v2.19 allows attackers to bypass authentication via a crafted request...

CVE-2025-45607

CVE-2025-45607 affects itranswarp v2.19; the issue is in the /manage/ component and allows authentication bypass via a crafted request. Root cause described as improper/auth bypass in that component. CVSS v3.1 base score 9.8 (CRITICAL). Exploitation details are not fully provided in the documents...

iTranswarp 安全漏洞

iTranswarp is a full-featured CMS by Crypto Michael Individual Developers. A security vulnerability exists in iTranswarp version v2.19, which stems from improper component/manage/authentication and could lead to bypassing authentication...