EUVD-2025-28379

Malicious code in bioql PyPI...

CVE-2025-50976

IPFire 2.29 DNS management interface dns.cgi fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLSHOSTNAME query parameters, resulting in a reflected cross-site scripting XSS vulnerability...

CVE-2025-50976

IPFire 2.29 DNS management interface dns.cgi fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLSHOSTNAME query parameters, resulting in a reflected cross-site scripting XSS vulnerability...

PT-2025-34800 · Ipfire · Ipfire

Name of the Vulnerable Software and Affected Versions: IPFire version 2.29 Description: The DNS management interface dns.cgi in IPFire fails to properly sanitize user-supplied input in the NAMESERVER, REMARK, and TLS HOSTNAME query parameters. This results in a reflected cross-site scripting XSS...

CVE-2025-50976

The IPFire 2.29 DNS management interface is vulnerable to a reflected cross-site scripting (XSS) attack within the dns.cgi component. The root cause is the failure to properly sanitize user-supplied input provided via the NAMESERVER , REMARK , and TLS_HOSTNAME query parameters. Exploitation of th...