13 matches found
DEBIAN-CVE-2026-7701
A security vulnerability has been detected in Telegram Desktop up to 6.7.5. This vulnerability affects the function RequestButton of the file Telegram/SourceFiles/boxes/urlauthbox.cpp of the component Bot API. The manipulation of the argument loginurl leads to null pointer dereference. It is...
EUVD-2026-26839
A security vulnerability has been detected in Telegram Desktop up to 6.7.5. This vulnerability affects the function RequestButton of the file Telegram/SourceFiles/boxes/urlauthbox.cpp of the component Bot API. The manipulation of the argument loginurl leads to null pointer dereference. It is...
CVE-2026-7701
Telegram Desktop
Telegram Desktop 安全漏洞
Telegram Desktop is the desktop version of Telegram’s open-source instant messaging mobile application. Versions of Telegram Desktop prior to 6.7.5 contained a security vulnerability. This vulnerability stemmed from the function RequestButton in the Bot API component, specifically the handling of...
EUVD-2018-3580
Malware in sbrugna...
CVE-2025-4223 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Reflected Cross-Site Scripting via login_url Parameter
The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘loginurl’ parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2025-4223: Improper Neutralization of Input During Web Page Generation
The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘loginurl’ parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for...
LibreHealth 2.0.0 Remote Code Execution Exploit
Exploit Title: LibreHealth v2.0.0 - Authenticated Remote Code Execution Exploit Author: Bobby Cooke Vendor Homepage: https://librehealth.io/ Software Link: https://github.com/LibreHealthIO/lh-ehr Version: 2.0.0 Tested On: Windows 10 Pro 1909 x6486 + XAMPP 7.4.4 Exploit Tested Using: Python 2.7.17...
Design/Logic Flaw
SGIN.CN xiangyun platform V9.4.10 has XSS via the loginurl parameter to /login.php...
CVE-2018-11553
SGIN.CN xiangyun platform V9.4.10 has XSS via the loginurl parameter to /login.php...
CVE-2018-11553
SGIN.CN xiangyun platform V9.4.10 has XSS via the loginurl parameter to /login.php...
CVE-2018-11553
The CVE-2018-11553 entry concerns the SGIN.CN xiangyun platform where an XSS vulnerability exists in login.php accessible via the login_url parameter. Connected sources describe a cross-site scripting flaw affecting SGIN.CN xiangyun platform, with mentions that version 9.4.1 (and the CVE listing ...