23 matches found
EUVD-2004-1277
Malware in sbrugna...
EUVD-2004-1278
Malware in sbrugna...
EUVD-2025-19366
Malicious code in bioql PyPI...
CVE-2025-53301
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme Junkie Theme Junkie Team Content theme-junkie-team-content allows DOM-Based XSS.This issue affects Theme Junkie Team Content: from n/a through = 0.1.1...
CVE-2025-53301
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme Junkie Theme Junkie Team Content theme-junkie-team-content allows DOM-Based XSS.This issue affects Theme Junkie Team Content: from n/a through = 0.1.1...
CVE-2025-53301 WordPress Theme Junkie Team Content plugin <= 0.1.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme Junkie Theme Junkie Team Content allows DOM-Based XSS. This issue affects Theme Junkie Team Content: from n/a through 0.1.1...
CVE-2025-53301 WordPress Theme Junkie Team Content plugin <= 0.1.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme Junkie Theme Junkie Team Content theme-junkie-team-content allows DOM-Based XSS.This issue affects Theme Junkie Team Content: from n/a through = 0.1.1...
CVE-2025-53301
CVE-2025-53301 affects Theme Junkie Team Content WordPress plugin (versions ≤ 0.1.1). The vulnerability is a DOM-based XSS caused by improper input neutralization during web page generation. Public details identify the affected software and version range; remediation is not confirmed in the provi...
CVE-2025-53301: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme Junkie Theme Junkie Team Content theme-junkie-team-content allows DOM-Based XSS.This issue affects Theme Junkie Team Content: from n/a through = 0.1.1...
PT-2025-27202 · Theme Junkie · Theme Junkie Team Content
Name of the Vulnerable Software and Affected Versions: Theme Junkie Team Content versions 0.1.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS attacks. This can potentially lead to malicious scripts bein...
WordPress plugin Theme Junkie Team Content Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
J-Business Directory,4.9.3,SQL Injection
jBusiness Directory from CMS Junkie,4.9.3 and previous versions, SQL Injection, XSS resolution: update to 4.9.4 update notice: http://www.cmsjunkie.com/blog/joomlabusinessdirectory4-9-4release/ Note that the developer did not inform the VEL...
J-CruiseReservation,3.0,SQL Injection
J-CruiseReservation by CMS Junkie, 3.0, SQL Injection...
JMultipleHotelReservation, 6.0.3, SQL Injection
JMultipleHotelReservation by CMS Junkie, 6.0.3, SQL Injection Resolution: Update to 6.0.4 Update notice: http://www.cmsjunkie.com/blog/joomla-hotel-reservation-6-0-4-release/...
J-Business Directory by CMS Junkie, 4.6.8, SQL Injection
J-Business Directory by CMS Junkie, 4.6.8, SQL Injection Resolution: update to 4.7.3 Update Notice URL: http://www.cmsjunkie.com/blog/cat/news-joomla-business-directory/post/joomlabusinessdirectory4-7-3release...
Joomla! Component J-MultipleHotelReservation Standard 6.0.2 - review_id SQL Injection
Joomla! Component J-MultipleHotelReservation Standard 6.0.2 - reviewid SQL Injection Exploit Title: Joomla! Component J-MultipleHotelReservation Standard v6.0.2 - SQL Injection Google Dork: inurl:index.php?option=comjcruisereservation Date: 21.02.2017 Vendor Homepage: http://www.cmsjunkie.com/...
CVE-2004-1281
The ftpretr function in junkie 0.3.1 allows remote malicious FTP servers to overwrite arbitrary files via .. dot dot sequences in a filename...
CVE-2004-1280
The guipopupviewfly function in guitviewpopup.c for junkie 0.3.1 allows remote malicious FTP servers to execute arbitrary commands via shell metacharacters in a filename...
CVE-2004-1280
CVE-2004-1280 affects junkie 0.3.1. The vulnerable code is gui_popup_view_fly in gui_tview_popup.c, which allows remote FTP servers to execute arbitrary commands via shell metacharacters in a filename, enabling command execution on the host. The documents do not provide a remediation or patch det...