CVE-2025-11146

Reflected Cross-site scripting XSS in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious scripts XSS in the web management application. The vulnerability is caused by improper handling of GET inputs included in the URL in “/acng-report.html”...

UBUNTU-CVE-2025-11146

Reflected Cross-site scripting XSS in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious scripts XSS in the web management application. The vulnerability is caused by improper handling of GET inputs included in the URL in “/acng-report.html”...

UBUNTU-CVE-2025-11147

Reflected cross-site scripting XSS in Apt-Cacher-NG v3.2.1. The vulnerability allows malicious scripts XSS to be executed in “/html/.html”...

CVE-2025-11147

CVE-2025-11147: Reflected XSS in Apt-Cacher-NG 3.2.1. The vulnerability allows script execution in /html/.html. Affected product is Apt-Cacher-NG; root cause is reflected XSS, with multiple sources noting no information on a vendor patch in some advisories, and others indicating patch status vari...

CVE-2025-11147

Reflected cross-site scripting XSS in Apt-Cacher-NG v3.2.1. The vulnerability allows malicious scripts XSS to be executed in “/html/.html”...

CVE-2025-11147 Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG

Reflected cross-site scripting XSS in Apt-Cacher-NG v3.2.1. The vulnerability allows malicious scripts XSS to be executed in “/html/.html”...

CVE-2025-11147 Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG

Reflected cross-site scripting XSS in Apt-Cacher-NG v3.2.1. The vulnerability allows malicious scripts XSS to be executed in “/html/.html”...

CVE-2025-11146

CVE-2025-11146 affects Apt-Cacher-NG (v3.2.1). The vulnerability is a Reflected XSS caused by improper handling of GET inputs in the URL at /acng-report.html, allowing execution of malicious scripts in the web management interface. The available connected documents confirm the affected product/ve...

CVE-2025-11146

Reflected Cross-site scripting XSS in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious scripts XSS in the web management application. The vulnerability is caused by improper handling of GET inputs included in the URL in “/acng-report.html”...

CVE-2025-11146 Reflected Cross-site scripting (XSS) vulnerability in Apt-Cacher-NG

Reflected Cross-site scripting XSS in Apt-Cacher-NG v3.2.1. The vulnerability allows an attacker to execute malicious scripts XSS in the web management application. The vulnerability is caused by improper handling of GET inputs included in the URL in “/acng-report.html”...

Apt-Cacher-NG 跨站脚本漏洞

Apt-Cacher-NG is a cache proxy service from the Apt-Cacher-NG open source. A cross-site scripting vulnerability exists in Apt-Cacher-NG version 3.2.1, which originates in /html/.html and is susceptible to reflective cross-site scripting attacks...

PT-2025-39821

Name of the Vulnerable Software and Affected Versions Apt-Cacher-NG version 3.2.1 Description A reflected cross-site scripting XSS issue exists in Apt-Cacher-NG. This allows the execution of malicious scripts within the “/html/.html” path. The vulnerability enables attackers to inject and execute...

Apt-Cacher-NG 跨站脚本漏洞

Apt-Cacher-NG is a cache proxy service from the Apt-Cacher-NG open source. A cross-site scripting vulnerability exists in Apt-Cacher-NG version 3.2.1, which stems from improper handling of GET inputs contained in URLs in the file /acng-report.html, and could lead to a reflective cross-site...

PT-2025-39820

Name of the Vulnerable Software and Affected Versions Apt-Cacher-NG version 3.2.1 Description A reflected cross-site scripting XSS issue exists in the web management application. This allows an attacker to execute malicious scripts. The issue is due to improper handling of GET inputs included in...

The vulnerability of the Syslog-ng processing tool, related to errors in the certificate validation process, allows a perpetrator to compromise the integrity of the data.

The vulnerability of the Syslog-ng processing tool is related to errors in the certificate validation process. Exploiting this vulnerability allows an attacker operating remotely to compromise the integrity of data...

Malicious code in ng-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47694 Malicious code in ng-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

[SECURITY] Fedora 42 Update: lemonldap-ng-2.21.3-1.fc42

LemonLdap::NG is a modular Web-SSO based on Apache::Session modules. It simplifies the build of a protected area with a few changes in the application. It manages both authentication and authorization and provides headers for accounting. So you can have a full AAA protection for your web space as...

[SECURITY] Fedora 43 Update: lemonldap-ng-2.21.3-1.fc43

LemonLdap::NG is a modular Web-SSO based on Apache::Session modules. It simplifies the build of a protected area with a few changes in the application. It manages both authentication and authorization and provides headers for accounting. So you can have a full AAA protection for your web space as...

Fedora 41 : lemonldap-ng (2025-67d99d2c39)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-67d99d2c39 advisory. See https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-21-3-is-out/ Tenable has extracted the preceding description block directly from the Fedora...