CVE-2025-42620

In affected versions, vulnerability-lookup handled user-controlled content in comments and bundles in an unsafe way, which could lead to stored Cross-Site Scripting XSS. On the backend, the relatedvulnerabilities field of bundles accepted arbitrary strings without format validation or proper...

EUVD-2025-8298

Malicious code in bioql PyPI...

CVE-2025-31141

In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page...

CVE-2025-31140

In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page...

CVE-2025-31140

In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page...

CVE-2025-31141

In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page...

CVE-2025-31141

In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page...

CVE-2025-31140

In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page...

CVE-2025-31141

In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page...

CVE-2025-31141

JetBrains TeamCity before 2025.03 is affected by CVE-2025-31141, where an exception on the Cloud Profiles page can lead to credential leakage. The issue is tied to TeamCity versions prior to 2025.03; no exploitation details are provided in the documents. Mitigation: upgrade to 2025.03 or later, a...

CVE-2025-31140

In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page...

CVE-2025-31140: Improper Neutralization of Input During Web Page Generation

In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page...

CVE-2025-31141: Generation of Error Message Containing Sensitive Information

In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page...

DotNetNuke File Upload Limit Bypass Vulnerability

DotNetNuke CMS referred to as DNN is a free , open source , scalable content management system , is built on the ASP.NET platform Web application framework. DotNetNuke has a security vulnerability. An attacker can upload files with extensions that are only allowed for super users by executing cod...

iimk.ac.in XSS vulnerability

Vulnerable URL: http://www.iimk.ac.in/academics/pgp/pgp20profiles.php?min=264%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:14 GMT Vulnerability type...