CVE-2025-62428

Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation...

CVE-2025-62428 Drawing-Captcha APP Host Header Injection in `/register` and `/confirm-email` Endpoints

Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation...

EUVD-2018-9624

Malware in sbrugna...

Cross Site Scripting (XSS)

@serenity-is/corelib is vulnerable to Cross Site Scripting XSS. The vulnerability is caused by improper URL validation within LoginPage.tsx because it fails to ensure that URLS don't start with a forward slash /, enabling malicious email links to execute unauthorized scripts...

The vulnerability of the ASP.NET Core software platform, related to errors in handling web requests, allows attackers to escalate their privileges and execute cross-site scripting attacks.

The vulnerability of the ASP.NET Core software platform is related to errors in processing web requests using templates. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and carry out a cross-site scripting attack by sending an email containing a malicious lin...

Threat Outbreak Alert: Fake Tax Return Document Email Messages on May 29, 2014

Medium Alert ID: 34411 First Published: 2014 May 29 18:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a tax return report for the recipient. The text in the email message attempts to convince the recipient to open th...

Threat Outbreak Alert: Fake Order Shipment Tracking Information Email Messages on October 7, 2013

Medium Alert ID: 31149 First Published: 2013 October 7 14:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain order shipment information for the recipient. The text in the email message attempts to convince the recipient ...