1055 matches found
PT-2025-46373
Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Framework affected versions not specified Description The NVIDIA NeMo Framework contains a flaw in a script that could allow an attacker to manipulate code generation with malicious input. Exploitation of this issue may result in...
NVIDIA Nemo Framework 代码注入漏洞
NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A code injection vulnerability exists in the NVIDIA Nemo Framework that stems from malicious input that could lead to improper control of code generation, which could result in code execution,...
CVE-2025-64442
HumHub (Open Source Enterprise Social Network) versions before 1.17.4 are affected by a cross-site scripting (XSS) vulnerability in the Meta-Search feature, allowing malicious input to execute in search previews. The issue is fixed in version 1.17.4. Impact is consistent with XSS (information dis...
CVE-2025-63639
The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting XSS due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing th...
Shopware vulnerable to Server-Side Request Forgery (SSRF) – order invoice
Impact This vulnerability allows malicious actors to force the application server to send HTTP requests to both external and internal servers. In certain cases, this may lead to access to internal resources such as databases, file systems, or other services that are not supposed to be directly...
CVE-2025-60280
Cross-Site Scripting XSS vulnerability in Bang Resto v1.0 could allow an attacker to inject malicious JavaScript code into the application's web pages. This vulnerability exists due to insufficient input sanitization or output encoding, allowing attacker-controlled input to be rendered directly i...
EUVD-2025-33881
HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery SSRF. An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server...
EUVD-2020-21032
Malware in sbrugna...
EUVD-2020-23294
Malware in sbrugna...
EUVD-2019-2698
Malware in sbrugna...
EUVD-2020-7771
Malware in sbrugna...
EUVD-2020-21009
Malware in sbrugna...
EUVD-2020-8127
Malware in sbrugna...
EUVD-2020-21025
Malware in sbrugna...
EUVD-2020-21023
Malware in sbrugna...
EUVD-2020-21021
Malware in sbrugna...
EUVD-2020-21034
Malware in sbrugna...
EUVD-2020-21013
Malware in sbrugna...