GHSA-CF57-C578-7JVV Anubis vulnerable to possible XSS via redir parameter when using subrequest auth mode

Summary When using subrequest authentication, Anubis did not perform validation of the redirect URL and redirects user to any URL scheme. While most modern browsers do not allow a redirect to javascript: URLs, it could still trigger dangerous behavior in some cases. GET...

CVE-2025-58747

Dify is an LLM application development platform. In Dify versions through 1.9.1, the MCP OAuth component is vulnerable to cross-site scripting when a victim connects to an attacker-controlled remote MCP server. The vulnerability exists in the OAuth flow implementation where the authorizationurl...

EUVD-2017-14562

Malware in sbrugna...

EUVD-2016-6177

Malware in sbrugna...

EUVD-2008-5484

Malware in sbrugna...

EUVD-2011-0017

Malware in sbrugna...

EUVD-2006-2782

Malware in sbrugna...

EUVD-2000-0945

Malware in sbrugna...

EUVD-2015-6709

Malware in sbrugna...

EUVD-2017-0356

Malware in sbrugna...

EUVD-2020-30796

Malware in sbrugna...

EUVD-2021-1654

Malware in sbrugna...

EUVD-2019-5045

Malware in sbrugna...

EUVD-2019-1005

Malware in sbrugna...

EUVD-1999-0347

Malware in sbrugna...

EUVD-2024-0628

Malicious code in bioql PyPI...

GHSA-VH3F-QPPR-J97F Mesh Connect JS SDK Vulnerable to Cross Site Scripting via createLink.openLink

Summary The lack of sanitization of URLs protocols in the createLink.openLink function enables the execution of arbitrary JavaScript code within the context of the parent page. Details...

firefox: thunderbird: javascript: URLs executed on object and embed tags

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Firefox executed javascript: URLs when used in object and embed tags...

firefox: thunderbird: javascript: URLs executed on object and embed tags

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Firefox executed javascript: URLs when used in object and embed tags...

FreeBSD : Mozilla -- 'javascript:' URLs execution (419bcf99-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 419bcf99-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: Thunderbird executed javascript: URLs when used in object and embed tags...