EUVD-2003-1227

Malware in sbrugna...

PT-2025-40336

Name of the Vulnerable Software and Affected Versions Ekushey CRM version 5.0 Description A stored Cross Site Scripting issue exists due to insufficient validation of user-supplied data. The issue is located in the /ekushey/index.php/client/project message/add/xxx API endpoint, specifically throu...

CVE-2021-32788 Post creator of a whisper post can be revealed to non-staff users in Discourse

Discourse is an open source discussion platform. In versions prior to 2.7.7 there are two bugs which led to the post creator of a whisper post being revealed to non-staff users. 1: Staff users that creates a whisper post in a personal message is revealed to non-staff participants of the personal...

CVE-2019-12830: Improper Neutralization of Input During Web Page Generation

In MyBB before 1.8.21, an attacker can exploit a parsing flaw in the Private Message / Post renderer that leads to video BBCode persistent XSS to take over any forum account, aka a nested video MyCode issue...

CVE-2003-1237: Undefined Security Weakness

Cross-site scripting vulnerability XSS in WWWBoard 2.0A2.1 and earlier allows remote attackers to inject arbitrary HTML or web script via a message post...

CVE-2003-1237

Cross-site scripting vulnerability XSS in WWWBoard 2.0A2.1 and earlier allows remote attackers to inject arbitrary HTML or web script via a message post...