8358 matches found
CVE-2025-27406
Technical details (affected products, versions, root cause, exploit vectors) are not provided in the connected documents. Monitor for updates.
CVE-2025-27406
Icinga Reporting is the central component for reporting related functionality in the monitoring web frontend and framework Icinga Web 2. A vulnerability present in versions 0.10.0 through 1.0.2 allows to set up a template that allows to embed arbitrary Javascript. This enables the attacker to act...
CVE-2025-27406 Icinga Reporting Stored XSS leads to SSRF
Icinga Reporting is the central component for reporting related functionality in the monitoring web frontend and framework Icinga Web 2. A vulnerability present in versions 0.10.0 through 1.0.2 allows to set up a template that allows to embed arbitrary Javascript. This enables the attacker to act...
CVE-2025-27406 Icinga Reporting Stored XSS leads to SSRF
Icinga Reporting is the central component for reporting related functionality in the monitoring web frontend and framework Icinga Web 2. A vulnerability present in versions 0.10.0 through 1.0.2 allows to set up a template that allows to embed arbitrary Javascript. This enables the attacker to act...
CVE-2025-27406
Icinga Reporting is the central component for reporting related functionality in the monitoring web frontend and framework Icinga Web 2. A vulnerability present in versions 0.10.0 through 1.0.2 allows to set up a template that allows to embed arbitrary Javascript. This enables the attacker to act...
ip-rs.si Cross Site Scripting vulnerability OBB-4040401
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Emissions Transparency: Moving Toward a More Rigorous Verification
...
dokishop.it Cross Site Scripting vulnerability OBB-4040262
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Icinga Reporting 代码问题漏洞
Icinga Reporting is an Icinga open source component that is a core component for reporting related functionality in Icinga web 2. A code issue vulnerability exists in Icinga Reporting versions 0.10.0 through 1.0.2 and earlier, which stems from embeddable arbitrary Javascript and could lead to use...
PT-2025-12972
Name of the Vulnerable Software and Affected Versions Icinga Reporting versions 0.10.0 through 1.0.2 Description A vulnerability in Icinga Reporting allows an attacker to embed arbitrary Javascript in a template. This enables the attacker to act on behalf of the user when the template is previewe...
CVE-2025-27406: Improper Neutralization of Input During Web Page Generation
Icinga Reporting is the central component for reporting related functionality in the monitoring web frontend and framework Icinga Web 2. A vulnerability present in versions 0.10.0 through 1.0.2 allows to set up a template that allows to embed arbitrary Javascript. This enables the attacker to act...
CVE-2025-30741
creationtimestamp| type| source ---|---|--- 2025-03-25 21:25:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8769 2025-03-25 23:40:33+00:00| seen| https://t.me/cvedetector/21122 2025-03-26 01:05:15+00:00| seen|...
Inaba Denki Sangyo CHOCO TEI WATCHER mini
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to obtain the product's login password, gain unauthorized access, tamper with product's data, and/or modify product settings. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...
CVE-2025-2762
creationtimestamp| type| source ---|---|--- 2025-03-25 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-176/ 2025-04-23 21:10:28+00:00| seen| https://t.me/cvedetector/23607...
CVE-2025-0718
creationtimestamp| type| source ---|---|--- 2025-03-23 09:47:47+00:00| seen| https://t.me/cvedetector/20892 2025-03-23 09:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkzy6ulpsw2h...
CVE-2025-29814
creationtimestamp| type| source ---|---|--- 2025-03-21 02:48:18+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114198137884586801 2025-03-21 02:58:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114198176776904764 2025-03-21 03:14:24+00:00| seen|...
CVE-2025-29922
creationtimestamp| type| source ---|---|--- 2025-03-20 18:20:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8255 2025-03-20 18:40:13+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lktdvxogex2g 2025-03-20 19:00:50+00:00| seen|...
bedford-hotel-london.hotel-ds.com Cross Site Scripting vulnerability OBB-4038399
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
backoffice.ipzv.de Cross Site Scripting vulnerability OBB-4038351
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
markator.fr Cross Site Scripting vulnerability OBB-4038184
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...