EUVD-2009-1833

Malware in sbrugna...

EUVD-2006-6959

Malware in sbrugna...

EUVD-2020-17384

Malware in sbrugna...

CVE-2025-61198

A stored cross-site scripting (XSS) vulnerability exists in Orban broadcast audio processors, specifically affecting Optimod 5950, Optimod 5950HD, Optimod 5750, Optimod 5750HD, Optimod Trio , and versions 1.0.0.33 and 2.5.26 . The root cause is the incorrect handling of malicious payloads within ...

EUVD-2023-42650

Malicious code in bioql PyPI...

EUVD-2024-55005

Malicious code in bioql PyPI...

NaumenKMS Knowledge Management System Arbitrary JavaScript Execution

The vulnerability of the NaumenKMS knowledge management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...

PERCo-Web Arbitrary JavaScript Execution

The vulnerability of the PERCo-Web access control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...

CVE-2025-55346 Unintended dynamic code execution leads to remote code execution by network attackers

User-controlled input flows to an unsafe implementation of a dynamic Function constructor, allowing network attackers to run arbitrary unsandboxed JS code in the context of the host, by sending a simple POST request...

CVE-2025-55346 Unintended dynamic code execution leads to remote code execution by network attackers

User-controlled input flows to an unsafe implementation of a dynamic Function constructor, allowing network attackers to run arbitrary unsandboxed JS code in the context of the host, by sending a simple POST request...

IBM Planning Analytics Local XSS

The vulnerability of the software web interface for managing business efficiency in IBM Planning Analytics Local is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...

XWiki Platform Arbitrary JavaScript Execution

The vulnerability of the XWiki Platform lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...

CVE-2023-38883

A reflected cross-site scripting XSS vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'ajax' parameter in 'ParentLookup.php'...

CVE-2019-13392

A reflected Cross-Site Scripting XSS vulnerability in MindPalette NateMail 3.0.15 allows an attacker to execute remote JavaScript in a victim's browser via a specially crafted POST request. The application will reflect the recipient value if it is not in the NateMail recipient array. Note that th...

E-Staff automated recruitment process system JavaScript Execution

The vulnerability of the E-Staff recruitment process automation system is related to errors in data filtering during object updates. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...

CVE-2024-46226

A stored cross site scripting XSS vulnerability in HelpDeskZ v2.0.2 allows remote attackers to execute arbitrary JavaScript in the administration panel by including a malicious payload into the file name and upload file function when creating a new ticket...

CVE-2024-46226

A stored cross site scripting XSS vulnerability in HelpDeskZ v2.0.2 allows remote attackers to execute arbitrary JavaScript in the administration panel by including a malicious payload into the file name and upload file function when creating a new ticket...

CVE-2025-22917

A reflected cross-site scripting XSS vulnerability in Audemium ERP =0.9.0 allows remote attackers to execute an arbitrary JavaScript payload in the web browser of a user by including a malicious payload into the 'type' parameter of list.php...

CVE-2024-55341

A stored cross-site scripting (XSS) vulnerability exists in Piranha CMS version 11.1 . The flaw allows remote attackers to execute arbitrary JavaScript in a user's web browser by creating a page via the /manager/pages endpoint and injecting an XSS payload within markdown content . As a temporary ...

PT-2024-9963 · Unknown · Express Web Client

Name of the Vulnerable Software and Affected Versions: eXpress web client affected versions not specified Description: The issue is caused by insufficient protection of the web page structure in the document viewer library of the eXpress web client. This allows a remote attacker to execute...