1208 matches found
WordPress plugin Triss 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...
CVE-2025-62598
WeGIA is an open source Web Manager for Institutions. CVE-2025-62598 is a reflected XSS vulnerability in the editar_info_pessoal.php endpoint (GET /WeGIA/html/pessoa/editar_info_pessoal.php?action=1) that affects versions prior to 3.5.1. The issue arises from insufficient input sanitization in th...
CVE-2025-61933 BIG-IP APM cross-site scripting (XSS) vulnerability
A reflected cross-site scripting XSS vulnerability exists in an undisclosed page of BIG-IP APM that allows an attacker to run JavaScript in the context of the targeted logged-out user. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2025-62178
WeGIA (open source Web Manager for Institutions) prior to version 3.5.1 is affected by a Reflected XSS in the endpoint /html/atendido/cadastro_atendido_parentesco_pessoa_nova.php, where the idatendido parameter can be exploited to inject scripts. The vulnerability, described across multiple sourc...
CVE-2025-62178 WeGIA Cross-Site Scripting (XSS) Reflected endpoint '/html/atendido/cadastro_atendido_parentesco_pessoa_nova.php' parameter 'idatendido'
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, a Reflected Cross-Site Scripting XSS vulnerability was identified in the /html/atendido/cadastroatendidoparentescopessoanova.php endpoint of the WeGIA application. This vulnerability...
CVE-2025-31994 HCL Unica Campaign is vulnerable to Reflected Cross-Site Scripting (XSS)
HCL Unica Campaign 12.1.10 is vulnerable to Reflected Cross-Site Scripting XSS where an attacker injects malicious script into an HTTP request, which is then reflected unsafely in the server's immediate response to the victim's browser, executing the script as if it originated from the trusted...
CVE-2025-59990 Junos Space: Template creation pages are vulnerable to reflected cross-site script injection
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the template creation pages that, when visited by another user, enable the attacker to execute commands with the target's...
WordPress Password only login plugin <= 0.2 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Password only login versions = 0.2...
EUVD-2017-6485
Malware in sbrugna...
EUVD-2021-18477
Malware in sbrugna...
EUVD-2018-20722
Malware in sbrugna...
EUVD-2020-15565
Malware in sbrugna...
EUVD-2018-19730
Malware in sbrugna...
EUVD-2017-18911
Malware in sbrugna...
EUVD-2018-12710
Malware in sbrugna...
EUVD-2020-11188
Malware in sbrugna...
EUVD-2021-11959
Malware in sbrugna...
EUVD-2019-7585
Malware in sbrugna...