CVE-2025-58747: Improper Neutralization of Input During Web Page Generation

Dify is an LLM application development platform. In Dify versions through 1.9.1, the MCP OAuth component is vulnerable to cross-site scripting when a victim connects to an attacker-controlled remote MCP server. The vulnerability exists in the OAuth flow implementation where the authorizationurl...

EUVD-2009-3002

Malware in sbrugna...

EUVD-2009-3000

Malware in sbrugna...

EUVD-2006-0476

Malware in sbrugna...

EUVD-2021-1166

Malware in sbrugna...

EUVD-2006-2966

Malware in sbrugna...

EUVD-2006-0539

Malware in sbrugna...

EUVD-2009-1592

Malware in sbrugna...

EUVD-2006-0241

Malware in sbrugna...

EUVD-2017-1561

Malware in sbrugna...

EUVD-2006-3755

Malware in sbrugna...

EUVD-2009-1593

Malware in sbrugna...

EUVD-2007-0777

Malware in sbrugna...

EUVD-2010-1612

Malware in sbrugna...

EUVD-2024-16398

Malicious code in bioql PyPI...

EUVD-2021-33525

Malicious code in bioql PyPI...

EUVD-2023-35297

Malicious code in bioql PyPI...

EUVD-2024-16399

Malicious code in bioql PyPI...

Mozilla Firefox URI Handler Privilege Escalation

The vulnerability of the JavaScript URI Handler component in Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird relates to reading data beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

CVE-2024-1563

An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external URL with a custom Firefox scheme and a timeout race condition. This vulnerability affects Focus for iOS 122...