344 matches found
EUVD-2019-7112
Malware in sbrugna...
EUVD-2019-5205
Malware in sbrugna...
EUVD-2018-6428
Malware in sbrugna...
EUVD-2010-5294
Malware in sbrugna...
EUVD-2019-6314
Malware in sbrugna...
EUVD-2020-14753
Malware in sbrugna...
EUVD-2022-53500
Malicious code in bioql PyPI...
EUVD-2022-39340
Malicious code in bioql PyPI...
EUVD-2024-32274
Malicious code in bioql PyPI...
EUVD-2021-29064
Malicious code in bioql PyPI...
Best Salon Management System 1.0 Cross Site Scripting
Best Salon Management System version 1.0 suffers from a persistent cross site scripting vulnerability...
Chaindesk Cross Site Scripting
Chaindesk, a web application for constructing AI Agents, is vulnerable to a persistent cross site scripting vulnerability in its agent chat component. An attacker can achieve arbitrary client-side script execution by crafting an AI agent whose system prompt instructs the underlying Large Language...
CVE-2024-45879
The file upload function in the "QWKalkulation" tool of baltic-it TOPqw Webportal v1.35.287.1 fixed in version 1.35.291, in /Apps/TOPqw/QWKalkulation/QWKalkulation.aspx, is vulnerable to Cross-Site Scripting XSS. To exploit the persistent XSS vulnerability, an attacker has to be authenticated to...
CVE-2023-25811
Uptime Kuma is a self-hosted monitoring tool. In versions prior to 1.20.0 the Uptime Kuma name parameter allows a persistent XSS attack. Users are advised to upgrade. There are no known workarounds for this vulnerability...
CVE-2023-6181
An oversight in BCB handling of reboot reason that allows for persistent code execution...
CVE-2021-43991
The Kentico Xperience CMS version 13.0 – 13.0.43 is vulnerable to a persistent Cross-Site Scripting XSS vulnerability also known as Stored or Second-Order XSS. Persistent XSS vulnerabilities occur when the application stores and retrieves client supplied data without proper handling of dangerous...
CVE-2021-30109
Froala Editor 3.2.6 is affected by Cross Site Scripting XSS. Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting XSS vulnerability within the hyperlink creation module...
CVE-2020-25476
Liferay CMS Portal version 7.1.3 and 7.2.1 have a blind persistent cross-site scripting XSS vulnerability in the user name parameter to Calendar. An attacker can insert the malicious payload on the username, lastname or surname fields of its own profile, and the malicious payload will be injected...
CVE-2025-48369 GroupOffice vulnerable to Stored XSS in Tasks Comment Section
Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20, a persistent Cross-Site Scripting XSS vulnerability exists in Groupoffice's tasks comment functionality, allowing attackers to execute arbitrary JavaScript by uploading an fil...