CVE-2025-42620

In affected versions, vulnerability-lookup handled user-controlled content in comments and bundles in an unsafe way, which could lead to stored Cross-Site Scripting XSS. On the backend, the relatedvulnerabilities field of bundles accepted arbitrary strings without format validation or proper...

EUVD-2025-8298

Malicious code in bioql PyPI...

CVE-2025-31141

In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page...

CVE-2025-31140

In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page...

CVE-2025-31140

In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page...

CVE-2025-31141

JetBrains TeamCity before 2025.03 is affected by CVE-2025-31141, where an exception on the Cloud Profiles page can lead to credential leakage. The issue is tied to TeamCity versions prior to 2025.03; no exploitation details are provided in the documents. Mitigation: upgrade to 2025.03 or later, a...

CVE-2025-31141

In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page...

CVE-2025-31140

In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page...

CVE-2025-31141

In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page...

CVE-2025-31140

In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page...

DotNetNuke File Upload Limit Bypass Vulnerability

DotNetNuke CMS referred to as DNN is a free , open source , scalable content management system , is built on the ASP.NET platform Web application framework. DotNetNuke has a security vulnerability. An attacker can upload files with extensions that are only allowed for super users by executing cod...

iimk.ac.in XSS vulnerability

Vulnerable URL: http://www.iimk.ac.in/academics/pgp/pgp20profiles.php?min=264%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:14 GMT Vulnerability type...