3406 matches found
CVE-2023-7313 Nagios XI < 5.11.3 XSS via Bulk Modifications
Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting XSS via the Bulk Modifications tool. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...
PT-2025-44553
Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.11.3 Description Nagios XI is susceptible to cross-site scripting XSS through the Bulk Modifications tool. The issue stems from inadequate validation or escaping of user-provided input, potentially enabling an...
Nagios XI 安全漏洞
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 5.11.3, which stems from insufficient...
CVE-2023-7313: Improper Neutralization of Input During Web Page Generation
Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting XSS via the Bulk Modifications tool. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...
blog-vue-springboot 安全漏洞
blog-vue-springboot is a blog project by the individual developer Minghui Shi. A security vulnerability exists in blog-vue-springboot that stems from allowing unauthorized arbitrary post modifications...
CVE-2025-53064
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...
EUVD-2025-34188
Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks on critical functions. These could result in potential denial-of-service, admin account takeover, or NAT rule modifications. Devices would no longer be able t...
PT-2025-41910
Name of the Vulnerable Software and Affected Versions Rockwell Automation 1783-NATR affected versions not specified Description The affected product contains multiple broken authentication issues stemming from missing authentication checks on critical functions. These issues could lead to...
CVE-2025-7328: Missing Authentication for Critical Function
Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks on critical functions. These could result in potential denial-of-service, admin account takeover, or NAT rule modifications. Devices would no longer be able t...
ANCORA: Accurate Intrusion Recovery for Web Applications
Modern web application recovery presents a critical dilemma. Coarse-grained snapshot rollbacks cause unacceptable data loss for legitimate users. Surgically removing an attack's impact is hindered by a fundamental challenge in high-concurrency environments: it is difficult to attribute resulting...
EUVD-1999-1076
Malware in sbrugna...
EUVD-2018-0121
Malware in sbrugna...
EUVD-2019-0135
Malware in sbrugna...
EUVD-2021-13166
Malware in sbrugna...
EUVD-2010-3861
Malware in sbrugna...
EUVD-2008-7250
Malware in sbrugna...
EUVD-2020-26124
Malware in sbrugna...
EUVD-2020-12498
Malware in sbrugna...