264 matches found
CVE-2025-0421
Improper Restriction of Rendered UI Layers or Frames vulnerability in Shopside Software Technologies Inc. Shopside allows iFrame Overlay. This issue affects Shopside: through 05022025...
CVE-2025-0421 iFrame Injection in Mikrogrup's Shopside
Improper Restriction of Rendered UI Layers or Frames vulnerability in Shopside Software Technologies Inc. Shopside allows iFrame Overlay. This issue affects Shopside: through 05022025...
CVE-2025-0421 iFrame Injection in Mikrogrup's Shopside
Improper Restriction of Rendered UI Layers or Frames vulnerability in Shopside Software Technologies Inc. Shopside allows iFrame Overlay. This issue affects Shopside: through 05022025...
EUVD-2021-1859
Malware in sbrugna...
EUVD-2022-0016
Malicious code in bioql PyPI...
EUVD-2025-29710
Malicious code in bioql PyPI...
EUVD-2023-2188
Malicious code in bioql PyPI...
PT-2025-40248
Name of the Vulnerable Software and Affected Versions Fiora chat application version 1.0.0 Description A Cross Site Scripting XSS issue exists in the Fiora chat application. The application allows the execution of arbitrary JavaScript code when malicious SVG files are rendered by other users...
Use of Web Link to Untrusted Target with window.opener Access
Overview jupyterlab is a JupyterLab computational environment. Affected versions of this package are vulnerable to Use of Web Link to Untrusted Target with window.opener Access via the link rendering process in LaTeX typesetters for Markdown files and cells. An attacker can potentially manipulate...
CVE-2024-13066
Improper Restriction of Rendered UI Layers or Frames vulnerability in Akinsoft LimonDesk allows iFrame Overlay, CAPEC - 103 - Clickjacking.This issue affects LimonDesk: from s1.02.14 before v1.02.17...
CVE-2024-13066
Improper Restriction of Rendered UI Layers or Frames vulnerability in Akinsoft LimonDesk allows iFrame Overlay, CAPEC - 103 - Clickjacking. This issue affects LimonDesk: from s1.02.14 before v1.02.17...
CVE-2025-55618
In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered...
CVE-2025-55618
In Hyundai Navigation App STD5W.EUR.HMC.230516.afa908d, an attacker can inject HTML payloads in the profile name field in navigation app which then get rendered...
PT-2025-34936 · Hyundai · Hyundai Navigation App
Name of the Vulnerable Software and Affected Versions: Hyundai Navigation App version STD5W.EUR.HMC.230516.afa908d Description: An attacker can inject HTML payloads into the profile name field within the navigation application, leading to the rendering of the injected content. Recommendations:...
CVE-2025-9108
Affected is an unknown function of the component Login Page. The manipulation leads to improper restriction of rendered ui layers. It is possible to launch the attack remotely...
CVE-2025-9108
CVE-2025-9108 affects Portabilis i-Diário’s Login Page UI layer. The root cause is an issue with improper restriction of rendered UI layers caused by manipulation of an unknown function, enabling remote exploitation. The PT-2025-33637 entry notes the vulnerable component and that exploit can be p...
Linux Distros Unpatched Vulnerability : CVE-2024-42010
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - modcssstyles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 insufficiently filters Cascading Style Sheets CSS token sequences in rendered e-mail messages,...
PT-2025-33637 · Portabilis · I-Diario
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The component Login Page contains an issue with improper restriction of rendered UI layers due to manipulation of an unknown function. This issue can be...
PT-2025-32422 · Workos · Authkit
Name of the Vulnerable Software and Affected Versions: @workos-inc/authkit-remix versions 0.14.1 and below Description: The AuthKit library for Remix exposed sensitive authentication artifacts – specifically sealedSession and accessToken – by returning them from the authkitLoader, causing them to...