2341 matches found
CVE-2024-58292: Improper Neutralization of Input During Web Page Generation
XMB Forum 1.9.12.06 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScript into templates and front page settings. Attackers can insert XSS payloads in footer templates and news ticker fields, enabling script execution for...
CVE-2025-11085
A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS. This vulnerability can result in the execution of malicious JavaScript, allowing for account takeover, credential theft, or redirection to a malicious website...
CVE-2025-11085: Improper Encoding or Escaping of Output
A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS. This vulnerability can result in the execution of malicious JavaScript, allowing for account takeover, credential theft, or redirection to a malicious website...
Pi-hole Web Interface < 6.3 Multiple Vulnerabilities
The Pi-hole Web Interface previously AdminLTE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2025-32785 Pi-hole Admin Interface vulnerable to persistent XSS on Subscribed lists group management (Adress Field)
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface versions prior to 6.3 are vulnerable to cross-site scripting XSS via the Address field in the Subscribed Lists group management section...
CVE-2025-60869
Publii CMS v0.46.5 (build 17089) is affected by a stored XSS in configuration fields (e.g., Site Description, Footer Follow Buttons). The issue arises from unsanitized input, allowing injected JavaScript to be stored in the project and executed in visitors’ browsers when viewing the generated sta...
CVE-2025-60869: Improper Neutralization of Input During Web Page Generation
Publii CMS v0.46.5 build 17089 allows persistent Cross-Site Scripting XSS via unsanitized input in configuration fields such as "Site Description" and "Footer Follow Buttons". An attacker can inject arbitrary JavaScript, which is stored in the project and executed in the browsers of remote visito...
EUVD-2019-9159
Malware in sbrugna...
EUVD-2019-9160
Malware in sbrugna...
EUVD-2020-6376
Malware in sbrugna...
EUVD-2019-2154
Malware in sbrugna...
EUVD-2020-3081
Malware in sbrugna...
EUVD-2020-26908
Malware in sbrugna...
EUVD-2020-0123
Malware in sbrugna...
EUVD-2019-18334
Malware in sbrugna...
EUVD-2020-17569
Malware in sbrugna...
EUVD-2016-9943
Malware in sbrugna...
EUVD-2019-10765
Malware in sbrugna...