57 matches found
CVE-2026-9279 Shell command injection in Logseq
Logseq exposes an IPC handler that allows the renderer process to execute shell commands. While an allowlist restricts the command name e.g. git, pandoc, grep, the argument string is concatenated with the command and passed to childprocess.spawn with the shell: true option, allowing shell...
CVE-2018-25309
MyBB Recent threads 17.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating threads with crafted subject lines. Attackers can create threads with script tags in the subject parameter to execute arbitrary JavaScript in the browser...
Cross-site Scripting (XSS)
Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Cross-site Scripting XSS via the plugin parameter in plugin/YPTWallet/plugins/YPTWalletStripe/confirmButton.php. An attacker can execute arbitrary JavaScript in a...
CVE-2025-54965
An XSS issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service does not properly sanitize the job ID parameter before using it in the job status page. An attacker who is able to social engineer a user into clicking a malicious link may be able to execute arbitrary...
CVE-2025-58747 Dify MCP OAuth Flow Vulnerable to XSS
Dify is an LLM application development platform. In Dify versions through 1.9.1, the MCP OAuth component is vulnerable to cross-site scripting when a victim connects to an attacker-controlled remote MCP server. The vulnerability exists in the OAuth flow implementation where the authorizationurl...
EUVD-2021-14196
Malware in sbrugna...
EUVD-2015-1408
Malware in sbrugna...
EUVD-2017-1492
Malware in sbrugna...
EUVD-2006-4452
Malware in sbrugna...
EUVD-2014-3208
Malware in sbrugna...
EUVD-2018-6190
Malware in sbrugna...
EUVD-2019-9115
Malware in sbrugna...
EUVD-2022-43485
Malicious code in bioql PyPI...
EUVD-2025-17888
Malicious code in bioql PyPI...
EUVD-2023-52590
Malicious code in bioql PyPI...
EUVD-2024-18499
Malicious code in bioql PyPI...
EUVD-2023-26418
Malicious code in bioql PyPI...
EUVD-2023-57427
Malicious code in bioql PyPI...
EUVD-2022-33124
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2012-5153
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, allows remote attackers to cause a denial of service or possibly have unspecified other...