Lucene search
+L

17 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•25 views

EUVD-2025-29626

Malicious code in bioql PyPI...

6.9CVSS5.8AI score0.00407EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/09/18 5:54 p.m.•32 views

CVE-2025-59161

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry in the room list with an unrelated...

6.9CVSS5.8AI score0.00407EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2025/09/16 5:15 p.m.•73 views

CVE-2025-59161

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry in the room list with an unrelated...

6.9CVSS7AI score0.00407EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/16 5:15 p.m.•49 views

CVE-2025-59161

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry in the room list with an unrelated...

6.9CVSS0.00407EPSS
SaveExploits0References2
Mend
Mend
•added 2025/09/16 4:44 p.m.•8 views

CVE-2025-59161

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry in the room list with an unrelated...

6.9CVSS0.00407EPSS
SaveExploits0References4
CVE
CVE
•added 2025/09/16 4:44 p.m.•94 views

CVE-2025-59161

CVE-2025-59161 affects Element Web and Element Desktop prior to 1.11.112. The issue stems from insufficient validation of room predecessor links, which could allow a remote attacker to impermanently replace a room’s entry in the room list with an attacker-supplied room. The effect is described as...

6.9CVSS6.6AI score0.00407EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/16 4:44 p.m.•8 views

CVE-2025-59161 In Element Web and Element Desktop, a malicious room can hide an unrelated room and cause it to be left when the malicious room is left

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry in the room list with an unrelated...

6.9CVSS6.6AI score0.00407EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/09/16 4:44 p.m.•56 views

CVE-2025-59161 In Element Web and Element Desktop, a malicious room can hide an unrelated room and cause it to be left when the malicious room is left

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry in the room list with an unrelated...

6.9CVSS0.00407EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/09/16 4:44 p.m.•29 views

CVE-2025-59161 In Element Web and Element Desktop, a malicious room can hide an unrelated room and cause it to be left when the malicious room is left

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry in the room list with an unrelated...

6.9CVSS6.6AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/16 12:00 a.m.•5 views

CVE-2025-59161: Improper Input Validation

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry in the room list with an unrelated...

6.9CVSS5.8AI score0.00407EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/09/16 12:00 a.m.•36 views

PT-2025-38059

Name of the Vulnerable Software and Affected Versions Element Web versions prior to 1.11.112 Element Desktop versions prior to 1.11.112 Description Element Web and Element Desktop are susceptible to a room list manipulation issue due to insufficient validation of room predecessor links. A remote...

6.9CVSS6.3AI score0.00407EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2025/09/16 12:00 a.m.•18 views

Element Desktop: Input validation error vulnerability

Element Desktop is an Element open source Matrix client for the Element Web-centered desktop platform. An input validation error vulnerability exists in Element Desktop versions prior to 1.11.112, which stems from insufficient validation of the room pre-links and could lead to a remote attacker...

6.9CVSS6.4AI score0.00407EPSS
SaveExploits0References3
CNVD
CNVD
•added 2022/01/27 12:00 a.m.•64 views

SourceCodester Hospital Patient Records Management System Cross-Site Scripting Vulnerability

SourceCodester Hospital Patient Records Management System is a web-based PHP application that provides an automated platform for hospitals to store and manage their patient records. A cross-site scripting vulnerability exists in version 1.0 of the Management System. The vulnerability is related t...

5.4CVSS0.9AI score0.00843EPSS
SaveExploits2References1
osv_cve
osv_cve
•added 2022/01/26 8:15 p.m.•25 views

CVE-2022-22852

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodtester Hospital's Patient Records Management System 1.0 via the description parameter in roomlist...

5.4CVSS5.8AI score0.00843EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2022/01/26 12:00 a.m.•2 views

PT-2022-15710

Name of the Vulnerable Software and Affected Versions Sourcecodtester Hospital's Patient Records Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the description parameter in "room list". This allows for potential malicious script execution...

5.4CVSS0.00843EPSS
SaveExploits2References6
CNNVD
CNNVD
•added 2022/01/26 12:00 a.m.•25 views

Sourcecodester Hospital Patient Records Management System Cross-site Scripting Vulnerability

SourceCodester Hospital Patient Records Management System is a web-based PHP application that provides an automated platform for hospitals to store and manage their patient records. A cross-site scripting vulnerability exists in version 1.0 of the Management System. The vulnerability is related t...

5.4CVSS5.3AI score0.00843EPSS
SaveExploits2References3
Packet Storm
Packet Storm
•added 2022/01/13 12:00 a.m.•285 views

Hospitals Patient Records Management System 1.0 Cross Site Scripting

Exploit Title: Hospitals Patient Records Management System 1.0 - 'doctors' Stored Cross Site Scripting XSS Exploit Author: Sant268 Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

7.4AI score
SaveExploits0
Rows per page
Query Builder