33073 matches found
CVE-2025-55203
Plane is open-source project management software. Prior to version 0.28.0, a stored cross-site scripting XSS vulnerability exists in the descriptionhtml field of Plane. This flaw allows an attacker to inject malicious JavaScript code that is stored and later executed in other users’ browsers. The...
CVE-2025-55203 Plane Stored XSS in Add Work Item Functionality
Plane is open-source project management software. Prior to version 0.28.0, a stored cross-site scripting XSS vulnerability exists in the descriptionhtml field of Plane. This flaw allows an attacker to inject malicious JavaScript code that is stored and later executed in other users’ browsers. The...
CVE-2025-55203 Plane Stored XSS in Add Work Item Functionality
Plane is open-source project management software. Prior to version 0.28.0, a stored cross-site scripting XSS vulnerability exists in the descriptionhtml field of Plane. This flaw allows an attacker to inject malicious JavaScript code that is stored and later executed in other users’ browsers. The...
CVE-2025-55203
Plane is an open‑source project management tool. A stored XSS vulnerability exists in the description_html field prior to version 0.28.0, where unsanitized/uncleaned input allows attacker‑provided JavaScript to be saved in the database and executed in other users’ browsers. Impacts include potent...
CVE-2025-9012 PHPGurukul Online Shopping Portal Project bill-ship-addresses.php sql injection
A vulnerability was identified in PHPGurukul Online Shopping Portal Project 2.0. This affects an unknown part of the file shopping/bill-ship-addresses.php. The manipulation of the argument billingpincode leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
MAL-2025-6879 Malicious code in @yaqiguo/dnstest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3478ba78740bef836d1172c597de70dda1774f80ed7d9c3b8273dc9fbc9db71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-9012: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in PHPGurukul Online Shopping Portal Project 2.0. This affects an unknown part of the file shopping/bill-ship-addresses.php. The manipulation of the argument billingpincode leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
PHPGurukul Online Shopping Portal Project 注入漏洞
Online Shopping Portal Project is an online shopping portal project. Online Shopping Portal Project suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter billingpincode in the file...
CVE-2025-9013: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.0. This vulnerability affects unknown code of the file /shopping/password-recovery.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...
CVE-2025-9011: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in PHPGurukul Online Shopping Portal Project 2.0. Affected by this issue is some unknown functionality of the file /shopping/signup.php. The manipulation of the argument emailid leads to sql injection. The attack may be launched remotely. The exploit has been...
PT-2025-34582 · Git · Libwebp
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438294044 Crash type: Null-dereference READ Crash state: enc [email protected]...
Malicious code in glacier-waterfall-ckb568-project (npm)
The package glacier-waterfall-ckb568-project was found to contain malicious code...
Malicious code in spruce-glacier-hrx832-project (npm)
The package spruce-glacier-hrx832-project was found to contain malicious code...
Malicious code in bonfire-hill-fjz601-project (npm)
The package bonfire-hill-fjz601-project was found to contain malicious code...
Malicious code in reef-bonfire-ats242-project (npm)
The package reef-bonfire-ats242-project was found to contain malicious code...
Malicious code in glacier-x6uw0-u15n3-quartz-project (npm)
The package glacier-x6uw0-u15n3-quartz-project was found to contain malicious code...
Malicious code in orchid-everglow-lsh735-project (npm)
The package orchid-everglow-lsh735-project was found to contain malicious code...
Malicious code in alchemy-5p9dp-k62ml-zenith-project (npm)
The package alchemy-5p9dp-k62ml-zenith-project was found to contain malicious code...