EUVD-2022-4371

Malicious code in bioql PyPI...

EUVD-2023-51111

Malicious code in bioql PyPI...

EUVD-2025-30915

Malicious code in bioql PyPI...

EUVD-2022-1995

Malicious code in bioql PyPI...

EUVD-2022-31648

Malicious code in bioql PyPI...

EUVD-2025-25724

Malicious code in bioql PyPI...

EUVD-2024-0628

Malicious code in bioql PyPI...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

PT-2025-39181

Name of the Vulnerable Software and Affected Versions YzmCMS versions through 7.3 Description A cross-site scripting issue exists in YzmCMS. The issue is related to the handling of the referer header on the register page, which could allow for malicious code execution. The referer header is a...

Yzmcms 安全漏洞

Yzmcms is an open source CMS Content Management System from Yzmcms Open Source. A security vulnerability exists in Yzmcms 7.3 and earlier versions, which stems from improper handling of the referer header on the registration page and may lead to cross-site scripting attacks...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

CVE-2025-56304

CVE-2025-56304 is an XSS vulnerability affecting YzmCMS up to version 7.3, caused by improper handling of the referer header on the registration page. The issue could allow crafted input via the referer header to be reflected in the app, enabling cross-site scripting with user interaction require...

Linux Distros Unpatched Vulnerability : CVE-2024-39125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header. CVE-2024-39125 Note that Nessus relies on the presence of the package as reporte...

Linux Distros Unpatched Vulnerability : CVE-2020-7996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - htdocs/user/passwordforgotten.php in Dolibarr 10.0.6 allows XSS via the Referer HTTP header. CVE-2020-7996 Note that Nessus relies on the presence of the packag...

Linux Distros Unpatched Vulnerability : CVE-2019-3850

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Links within assignment submission comments would open directly in the same...

Linux Distros Unpatched Vulnerability : CVE-2018-18655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lacks a no-referrer...

Linux Distros Unpatched Vulnerability : CVE-2016-5739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content...

K000152958: Curl vulnerability CVE-2021-22876

Security Advisory Description curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the...