CVE-2026-8152

Unblu Spark contains an open redirect vulnerability that can be escalated to a DOM-based cross-site scripting XSS attack. When Unblu Spark is deployed with com.unblu.identifier.siteEmbeddedSetup=true, it runs in the same origin as the host application. Any JavaScript injected through this...

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-7775, CVE-2025-7776 and CVE-2025-8424

Severity - Critical Description of Problem Multiple vulnerabilities have been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions The following supported versions of NetScaler ADC and NetScaler Gateway a...

PT-2024-30202

Name of the Vulnerable Software and Affected Versions RuoYi CMS versions prior to 4.7.9 Description The issue is related to a SQL injection vulnerability. It can be exploited via the job id parameter at the "/sasfs1" endpoint. This allows an unauthenticated attacker to manipulate the job id and...