4562 matches found
PT-2025-33854 · Flaskblog · Flaskblog
Name of the Vulnerable Software and Affected Versions: flaskBlog versions prior to 2.8.1 Description: flaskBlog is a blog app built with Flask. An arbitrary user can change their role to "admin", granting administrative privileges such as deleting users, posts, and comments. The issue resides in...
Linux Distros Unpatched Vulnerability : CVE-2025-3454
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL path. Users with...
Linux Distros Unpatched Vulnerability : CVE-2020-14326
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU...
GHSA-Q4RG-7CJJ-5R86 ExpressGateway Cross-Site Scripting Vulnerability in lib/rest/routes/users.js
A cross-site scripting XSS issue exists in ExpressGateway up to 1.16.10 in the REST endpoint implemented in lib/rest/routes/users.js. User-controlled input is reflected into the HTTP response without proper sanitization, allowing arbitrary JavaScript execution in the browser of a logged-in user w...
ExpressGateway Cross-Site Scripting Vulnerability in lib/rest/routes/users.js
A cross-site scripting XSS issue exists in ExpressGateway up to 1.16.10 in the REST endpoint implemented in lib/rest/routes/users.js. User-controlled input is reflected into the HTTP response without proper sanitization, allowing arbitrary JavaScript execution in the browser of a logged-in user w...
CVE-2025-9096
A vulnerability has been found in ExpressGateway express-gateway up to 1.16.10. Affected is an unknown function in the library lib/rest/routes/apps.js of the component REST Endpoint. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...
Cross-site Scripting (XSS)
Overview express-gateway is an A microservices API gateway built on top of ExpressJS Affected versions of this package are vulnerable to Cross-site Scripting XSS via the /users/:id and /apps/:id routes, where unsanitized user-supplied input req.params.id is directly embedded into the server's...
CVE-2025-9095
A flaw has been found in ExpressGateway express-gateway up to 1.16.10. This issue affects some unknown processing in the library lib/rest/routes/users.js of the component REST Endpoint. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...
DEBIAN-CVE-2025-38542
In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix device refcount leak in atrtrcreate When updating an existing route entry in atrtrcreate, the old device reference was not being released before assigning the new device, leading to a device refcount leak. Fix...
Linux Distros Unpatched Vulnerability : CVE-2022-48999
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ipv4: Handle attempt to delete multipath route when fibinfo contains an nh reference Gwangun...
Linux Distros Unpatched Vulnerability : CVE-2022-49903
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: fix WARNING in ip6routenetexitlate During the initialization of ip6routenetinitlate, if file ipv6route or rt6stats fails to be created, the initialization...
Malicious code in object-easy-route-proxy-bundle (npm)
The package object-easy-route-proxy-bundle was found to contain malicious code...
MAL-2025-8780 Malicious code in @malware-test-mango-leaks-prore-route/test-mlw3-mango-leaks-prore-route (npm)
The package @malware-test-mango-leaks-prore-route/test-mlw3-mango-leaks-prore-route was found to contain malicious code...
Malicious code in route-promise-class-file-encode (npm)
The package route-promise-class-file-encode was found to contain malicious code...
Malicious code in book-short-grid-benchmark-route (npm)
The package book-short-grid-benchmark-route was found to contain malicious code...
Malicious code in grid-public-link-route-rain (npm)
The package grid-public-link-route-rain was found to contain malicious code...
MAL-2025-17461 Malicious code in compress-route-query-route-permission (npm)
The package compress-route-query-route-permission was found to contain malicious code...
MAL-2025-32477 Malicious code in route-theta-sanitize-iota-await (npm)
The package route-theta-sanitize-iota-await was found to contain malicious code...