85780 matches found
CVE-2025-5806
Jenkins Gatling Plugin 136.vb9009b3d33ae serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting XSS vulnerability exploitable by users able to change report content...
CVE-2025-5806
The Jenkins Gatling Plugin (version 136.vb_9009b_3d33a_e ) is vulnerable to a Cross-Site Scripting (XSS) attack. The root cause is that the plugin serves Gatling reports in a way that bypasses the Content-Security-Policy protections introduced in Jenkins versions 1.641 and 1.625 . An attacker cap...
CVE-2025-5806
Jenkins Gatling Plugin 136.vb9009b3d33ae serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting XSS vulnerability exploitable by users able to change report content...
CVE-2025-5729
creationtimestamp| type| source ---|---|--- 2025-06-06 10:58:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwoieqvhq2m...
CVE-2025-3321
creationtimestamp| type| source ---|---|--- 2025-06-06 10:15:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114635894258411433 2025-06-06 10:48:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwnwc7ivx2m...
CVE-2025-5704
creationtimestamp| type| source ---|---|--- 2025-06-06 02:58:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvtn6rlpy2k...
CVE-2025-5708
A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /Admin/NewsReport.php. The manipulation of the argument txtFrom leads to sql injection. It is possible to initiate the attack remotely. The...
OSV-2025-442 Security exception in org.jsoup.parser.HtmlTreeBuilder.process
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=422516687 Crash type: Security exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$8.process org.jsoup.parser.TreeBuilder.currentElement...
PT-2025-24276
Name of the Vulnerable Software and Affected Versions Jenkins Gatling Plugin version 136.vb 9009b 3d33a e Description The issue allows users who can change report content to exploit a cross-site scripting XSS vulnerability due to the manner in which Gatling reports are served, bypassing the...
PT-2025-24033 · WordPress · Hive Support
Name of the Vulnerable Software and Affected Versions: Hive Support plugin for WordPress affected versions not specified Description: The issue concerns unauthorized access and modification of data due to a missing capability check. This allows for an authentication bypass, enabling unauthorized...
CVE-2021-24442
creationtimestamp| type| source ---|---|--- 2025-06-06 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-06-06 2025-06-07 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-06-07 2025-06-08 00:00:00+00:00| seen| The Shadowserver...
PT-2025-25510 · Git +1 · Jsoup
Name of the Vulnerable Software and Affected Versions: jsoup affected versions not specified Description: The software is susceptible to a security exception during HTML processing. The crash occurs within the org.jsoup.parser.HtmlTreeBuilder class, specifically during the process and...
PT-2025-24218 · Google +1 · Recaptcha +1
Name of the Vulnerable Software and Affected Versions: Matthias Nordwig Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant versions n/a through 4.1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This is a...
CVE-2025-5806: Improper Neutralization of Input During Web Page Generation
Jenkins Gatling Plugin 136.vb9009b3d33ae serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting XSS vulnerability exploitable by users able to change report content...
XSS vulnerability in gatling
gatling 136.vb9009b3d33ae serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625.3. This results in a cross-site scripting XSS vulnerability exploitable by users able to change report content. As of publication of this advisor...
IBM DB2 DoS (7235069) (Windows)
According to it self-reported version number, IBM Db2 is affected by a remote code execution vulnerability as a database administrator of one database may execute code or read/write files from another database within the same instance. Note that Nessus has not tested for this issue but has instea...
CVE-2025-5694
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. The attack ma...
CVE-2025-5694 PHPGurukul Human Metapneumovirus Testing Management System search-report-result.php sql injection
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. The attack ma...
CVE-2025-5693
A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /bwdates-report-result.php. The manipulation of the argument fromdate/todate leads to sql injection...
CVE-2025-5702
creationtimestamp| type| source ---|---|--- 2025-06-05 19:03:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114632309907329659 2025-06-06 01:22:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvocgjpu42e 2025-06-08 06:28:31+00:00| seen|...