CVE-2025-59788

A flaw was found in Nextcloud's PDF Portable Document Format viewer. This vulnerability allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted PDF file to viewer.html in the filespdfviewer example directory...

Nextcloud Server Multiple Vulnerabilities (GHSA-24wp-p865-7j4r)

Nextcloud Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nextcloud:nextcloudserver"...

CVE-2025-59788

Cross-site scripting XSS vulnerability in a reachable filespdfviewer example directory in Nextcloud with versions before 22.2.10.33, 23.0.12.29, 24.0.12.28, 25.0.13.23, 26.0.13.20, 27.1.11.20, 28.0.14.11, 29.0.16.8, 30.0.17, 31.0.10, and 32.0.1 allows attackers to execute arbitrary JavaScript in...

EUVD-2025-23939

Malicious code in bioql PyPI...

EUVD-2023-58595

Malicious code in bioql PyPI...

EUVD-2025-19729

Malicious code in bioql PyPI...

EUVD-2024-30752

Malicious code in bioql PyPI...

PT-2025-49115

Name of the Vulnerable Software and Affected Versions Nextcloud versions prior to 22.2.10.33 Nextcloud versions prior to 23.0.12.29 Nextcloud versions prior to 24.0.12.28 Nextcloud versions prior to 25.0.13.23 Nextcloud versions prior to 26.0.13.20 Nextcloud versions prior to 27.1.11.20 Nextcloud...

CVE-2025-51629

A cross-site scripting XSS vulnerability in the PdfViewer component of Agenzia Impresa Eccobook 2.81.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Temp parameter...

CVE-2025-51629

CVE-2025-51629 is an XSS in the PdfViewer component of Agenzia Impresa Eccobook 2.81.1. The root cause is improper handling of the Temp parameter, allowing an attacker to inject crafted payloads that execute scripts/HTML. Affected product: Agenzia Impresa Eccobook (PdfViewer, version 2.81.1). Imp...

Agenzia Impresa EccoBook 安全漏洞

Agenzia Impresa EccoBook is a ledger software from Agenzia Impresa, Italy. A security vulnerability exists in Agenzia Impresa EccoBook version 2.81.1, which stems from the improper handling of the Temp parameter by the PdfViewer component, which could lead to a cross-site scripting attack...

CVE-2025-51629

A cross-site scripting XSS vulnerability in the PdfViewer component of Agenzia Impresa Eccobook 2.81.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Temp parameter...

CVE-2025-51629

A cross-site scripting XSS vulnerability in the PdfViewer component of Agenzia Impresa Eccobook 2.81.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Temp parameter...

PT-2025-32293 · Unknown · Agenzia Impresa Eccobook

Name of the Vulnerable Software and Affected Versions: Agenzia Impresa Eccobook version 2.81.1 Description: A cross-site scripting XSS vulnerability exists in the PdfViewer component. This allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Temp...

CVE-2025-6725

In the PdfViewer component, a Cross-Site Scripting XSS vulnerability is possible if a specially-crafted document has already been loaded and the user engages with a tool that requires the DOM to be re-rendered...

CVE-2025-6725

In the PdfViewer component, a Cross-Site Scripting XSS vulnerability is possible if a specially-crafted document has already been loaded and the user engages with a tool that requires the DOM to be re-rendered...

CVE-2025-6725 Cross-Site Scripting (XSS) in PdfViewer

In the PdfViewer component, a Cross-Site Scripting XSS vulnerability is possible if a specially-crafted document has already been loaded and the user engages with a tool that requires the DOM to be re-rendered...

CVE-2025-6725 Cross-Site Scripting (XSS) in PdfViewer

In the PdfViewer component, a Cross-Site Scripting XSS vulnerability is possible if a specially-crafted document has already been loaded and the user engages with a tool that requires the DOM to be re-rendered...

CVE-2025-6725

CVE-2025-6725 is a Cross-Site Scripting (XSS) vulnerability reported in the PdfViewer component across Progress Telerik UI products (e.g., UI for ASP.NET Core/Blazor/ASP.NET MVC, Kendo UI for React/Angular/jQuery). The root cause, as described in the initial materials, is insufficient validation ...

PT-2025-27642 · Unknown · Pdf Viewer

Name of the Vulnerable Software and Affected Versions: PdfViewer affected versions not specified Description: A Cross-Site Scripting XSS issue is possible in the PdfViewer component when a specially-crafted document is loaded and the user interacts with a tool that requires the DOM to be...