CVE-2026-12811 kortix-ai suna Auth Endpoint page.tsx router.push cross site scripting

A weakness has been identified in kortix-ai suna up to 0.8.38. Affected by this issue is the function router.replace/router.push of the file apps/frontend/src/app/auth/page.tsx of the component Auth Endpoint. Executing a manipulation of the argument returnURL can lead to cross site scripting. The...

EUVD-2025-1948

Malicious code in bioql PyPI...

CVE-2025-0970

A vulnerability was found in Zenvia Movidesk up to 25.01.22. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /Account/Login. The manipulation of the argument ReturnUrl leads to open redirect. The attack can be launched remotely. The...

Zenvia 输入验证错误漏洞

Zenvia is a complete customer service software from Zenvia, Inc. An input validation error vulnerability exists in Zenvia version 25.01.22 and prior versions, which stems from the fact that incorrect manipulation of the parameter ReturnUrl can result in an open redirect...