851 matches found
CVE-2025-40707 Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH
Cross-Site Scripting XSS vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage ACDH-CH, due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an...
CVE-2025-40707 Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH
Cross-Site Scripting XSS vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage ACDH-CH, due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an...
PT-2025-35208
Name of the Vulnerable Software and Affected Versions: OpenAtlas version 8.9.0 Description: A Cross-Site Scripting XSS issue exists due to inadequate validation of user input when a POST request is sent. This could allow a remote user to send specially crafted queries to an authenticated user and...
“No place in our networks”: FCC hangs up on thousands of voice operators in robocall war
Everyone hates robocalls. However, it's difficult to track down all the scammers and spammers that make them, so the Federal Communications Commission FCC has taken another approach: it just disconnected over a thousand voice operators from the public telephone network for not doing their part to...
CVE-2025-48005
creationtimestamp| type| source ---|---|--- 2025-08-26 06:30:26+00:00| seen| https://infosec.place/objects/932cb874-108d-4ab8-a61b-e391dc9ab55e...
CVE-2025-53511
creationtimestamp| type| source ---|---|--- 2025-08-26 06:30:05+00:00| seen| https://infosec.place/objects/adf9eba9-608a-49fd-8326-3ef6bde042c7...
CVE-2025-50129
creationtimestamp| type| source ---|---|--- 2025-08-25 18:30:20+00:00| seen| https://infosec.place/objects/372b2cb2-47af-4a03-b038-fab15a8948c0 2025-08-26 00:53:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbch7qx2b2q...
CVE-2025-53510
creationtimestamp| type| source ---|---|--- 2025-08-25 18:30:09+00:00| seen| https://infosec.place/objects/c58484ca-95bb-4239-b16d-14f323a411d2 2025-08-26 00:43:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbbvctaom2k...
CVE-2025-54492
creationtimestamp| type| source ---|---|--- 2025-08-25 17:17:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxaixlshbj2v 2025-08-26 06:00:33+00:00| seen| https://infosec.place/objects/b2da2ec8-4c53-4b1c-895a-87a06d68df32...
CVE-2025-46407
creationtimestamp| type| source ---|---|--- 2025-08-25 17:00:05+00:00| seen| https://infosec.place/objects/d3347c61-8094-4ca8-9ae3-5b30d808cbc6 2025-08-26 00:16:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbaf4e4hc2z...
CVE-2025-54032
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebCodingPlace Real Estate Manager Pro real-estate-manager-pro allows Reflected XSS.This issue affects Real Estate Manager Pro: from n/a through = 12.7.3...
CVE-2025-54032
CVE-2025-54032 is a reflected XSS in the WordPress plugin Real Estate Manager Pro (versions up to 12.7.3). The root cause is improper input neutralization during web page generation, enabling an attacker-controlled input to be reflected in the page. The CVSS v3.1 base score is 7.1 (High); attack ...
CVE-2024-45062
creationtimestamp| type| source ---|---|--- 2025-08-19 14:00:05+00:00| seen| https://infosec.place/objects/d55e8fc5-68ed-4fa3-8cac-3aa62665b522...
Linux Distros Unpatched Vulnerability : CVE-2020-13674
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The QuickEdit module does not properly validate access to routes, which could allow cross-site request forgery under some circumstances and lead to possible dat...
Linux Distros Unpatched Vulnerability : CVE-2025-27498
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aes-gcm is a pure Rust implementation of the AES-GCM. In decryptinplacedetached, the decrypted ciphertext which is the correct ciphertext is exposed even if the...
Malicious code in a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk (npm)
The package a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk was found to contain malicious code...
MAL-2025-8438 Malicious code in @lion-team/place-search (npm)
The package @lion-team/place-search was found to contain malicious code...
MAL-2025-13917 Malicious code in a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk (npm)
The package a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk was found to contain malicious code...