9722 matches found
CVE-2025-61198
A stored cross-site scripting XSS vulnerability in Optimod 5950 - Optimod 5950HD - Optimod 5750 - Optimod 5750HD - Optimod Trio - Optimod version 1.0.0.33 - System version 2.5.26, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payloa...
CVE-2025-61198
CVE-2025-61198 is a stored XSS in Orban Optimod devices (5950/5950HD/5750/5750HD/Trio) affecting Optimod 1.0.0.33 and System 2.5.26. The vulnerability arises from injecting a malicious payload into logs that are rendered in the UI, allowing an attacker to execute arbitrary JavaScript in a user’s ...
BIT-MONGODB-2025-6711 Incomplete Redaction of Sensitive Information in MongoDB Server Logs
An issue has been identified in MongoDB Server where unredacted queries may inadvertently appear in server logs when certain error conditions are encountered. This issue affects MongoDB Server v8.0 versions prior to 8.0.5, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v6.0...
Cross-site Scripting (XSS)
Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Cross-site Scripting XSS via the chat logs, due to improper input sanitization. An attacker can access sensitive information or impersonate an administrator by injecting malicious HTML or scripts into chat...
GHSA-7R4H-VMJ9-WG42 Flowise Stored XSS vulnerability through logs in chatbot
Description In the chat log, tags like input and form are allowed. This makes a potential vulnerability where an attacker could inject malicious HTML into the log via prompts. When an admin views the log containing the malicious HTML, the attacker could steal the admin's credentials or sensitive...
Flowise Stored XSS vulnerability through logs in chatbot
Description In the chat log, tags like input and form are allowed. This makes a potential vulnerability where an attacker could inject malicious HTML into the log via prompts. When an admin views the log containing the malicious HTML, the attacker could steal the admin's credentials or sensitive...
EUVD-2025-13100
Malicious code in bioql PyPI...
EUVD-2023-35730
Malicious code in bioql PyPI...
EUVD-2025-30269
Malicious code in bioql PyPI...
EUVD-2024-52656
Malicious code in bioql PyPI...
EUVD-2025-25755
Malicious code in bioql PyPI...
EUVD-2024-37645
Malicious code in bioql PyPI...
EUVD-2024-24398
Malicious code in bioql PyPI...
EUVD-2024-26930
Malicious code in bioql PyPI...
EUVD-2023-1505
Malicious code in bioql PyPI...
EUVD-2024-44087
Malicious code in bioql PyPI...
EUVD-2024-22392
Malicious code in bioql PyPI...
EUVD-2023-32717
Malicious code in bioql PyPI...