12292 matches found
CVE-2025-60298
Novel-Plus up to 5.2.4 was discovered to contain a Stored Cross-Site Scripting XSS vulnerability via the /author/updateIndexName endpoint. This vulnerability allows authenticated attackers to inject malicious JavaScript code through the indexName parameter, which gets stored in the database and...
CVE-2025-60298: Improper Neutralization of Input During Web Page Generation
Novel-Plus up to 5.2.4 was discovered to contain a Stored Cross-Site Scripting XSS vulnerability via the /author/updateIndexName endpoint. This vulnerability allows authenticated attackers to inject malicious JavaScript code through the indexName parameter, which gets stored in the database and...
CVE-2025-60299
The online social reading and writing platform Novel-Plus version 5.2.0 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the unvalidated input of the replyContent parameter via the /book/addCommentReply endpoint. An authenticated user can inject malicious Java...
CVE-2025-60299
Novel-Plus with 5.2.0 was discovered to contain a Stored Cross-Site Scripting XSS vulnerability via the /book/addCommentReply endpoint. An authenticated user can inject malicious JavaScript through the replyContent parameter when replying to a book comment. The payload is stored in the database a...
Improper Removal of Sensitive Information Before Storage or Transfer
Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer via the use of the + operator when combining URIs. An attacker can obtain sensitive user credentials by crafting a URI that, when merged with another, results in the...
CVE-2023-53683
In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove WARNON from hfspluscatread,writeinode syzbot is hitting WARNON in hfspluscatread,writeinode, for crafted filesystem image can contain bogus length. There conditions are not kernel bugs that can justify kernel ...
pwnable-kr
It is an offensive tool for pwnable.kr. The repository contains...
CVE-2022-50539
In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: omap4-common: Fix refcount leak bug In omap4sraminit, offindcompatiblenode will return a node pointer with refcount incremented. We should use ofnodeput when it is not used anymore...
EUVD-2020-26268
Malware in sbrugna...
EUVD-2017-11877
Malware in sbrugna...
EUVD-2008-4416
Malware in sbrugna...
EUVD-2007-2794
Malware in sbrugna...
EUVD-2021-24222
Malware in sbrugna...
EUVD-2021-23981
Malware in sbrugna...
EUVD-2020-14409
Malware in sbrugna...
EUVD-2019-6427
Malware in sbrugna...
EUVD-2020-27986
Malware in sbrugna...
EUVD-2020-12698
Malware in sbrugna...