CVE-2025-69245

Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6...

CVE-2025-69245

Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6...

CVE-2025-69245 Reflected XSS in Raytha CMS

Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6...

CVE-2025-69245 Reflected XSS in Raytha CMS

Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6...

CVE-2026-26722

An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to escalate privileges via PIN component of the login functionality...

CVE-2026-26722

CVE-2026-26722 affects Key Systems Inc Global Facilities Management Software v.20230721a. A remote attacker can escalate privileges through the PIN component of the login functionality. Documents consistently indicate privilege escalation as the impact; CVSSv3.1 vectors imply Network access, Low ...

CVE-2025-14598 CVE-2025-14598

BeeS Software Solutions BET Portal contains an SQL injection vulnerability in the login functionality of affected sites. The vulnerability enables arbitrary SQL commands to be executed on the backend database...

CVE-2024-39608

A firmware update vulnerability exists in the login.cgi functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can send an unauthenticated message to trigger this vulnerability...

EUVD-2018-20422

Malware in sbrugna...

EUVD-2013-1123

Malware in sbrugna...

EUVD-2020-30210

Malware in sbrugna...

EUVD-2020-26940

Malware in sbrugna...

EUVD-2008-6901

Malware in sbrugna...

EUVD-2024-0155

Malicious code in bioql PyPI...

EUVD-2023-54092

Malicious code in bioql PyPI...

EUVD-2025-12697

Malicious code in bioql PyPI...

EUVD-2023-2516

Malicious code in bioql PyPI...

EUVD-2022-28958

Malicious code in bioql PyPI...

EUVD-2024-23279

Malicious code in bioql PyPI...

EUVD-2023-41369

Malicious code in bioql PyPI...