EUVD-2006-4749

Malware in sbrugna...

EUVD-2025-21899

Malicious code in bioql PyPI...

CVE-2025-52162

agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to contain an XML External Entity XXE via the RSSReader endpoint. This vulnerability allows attackers to access sensitive data via providing a crafted XML input...

CVE-2025-52162

agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to contain an XML External Entity XXE via the RSSReader endpoint. This vulnerability allows attackers to access sensitive data via providing a crafted XML input...

CVE-2025-52162

agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to contain an XML External Entity XXE via the RSSReader endpoint. This vulnerability allows attackers to access sensitive data via providing a crafted XML input...

CVE-2025-52162

CVE-2025-52162 affects agorum core open v11.9.2 and v11.10.1. It is an XML External Entity (XXE) vulnerability exposed via the RSSReader endpoint, enabling data access with crafted XML input. Root cause: improper XML handling leading to XXE; Impact: potential exposure of sensitive data. Remediati...

PT-2025-30070 · Unknown · Agorum Core Open

Name of the Vulnerable Software and Affected Versions: agorum core open versions 11.9.2 and 11.10.1 Description: The software contains an XML External Entity XXE issue via the RSSReader endpoint. Attackers can potentially access sensitive data by providing a crafted XML input. Recommendations: Fo...

esenbogaairport.com XSS vulnerability

Open Bug Bounty ID: OBB-413949 Description| Value ---|--- Affected Website:| esenbogaairport.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Debian: Security Advisory (DSA-2596-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2596-1 (mediawiki-extensions - cross-site scripting)

Thorsten Glaser discovered that the RSSReader extension for MediaWiki, a website engine for collaborative work, does not properly escape tags in feeds. This could allow a malicious feed to inject JavaScript into the MediaWiki pages. OpenVAS Vulnerability Test $Id: deb25961.nasl 8972 2018-02-28...

Debian DSA-2596-1 : mediawiki-extensions - XSS

Thorsten Glaser discovered that the RSSReader extension for MediaWiki, a website engine for collaborative work, does not properly escape tags in feeds. This could allow a malicious feed to inject JavaScript into the MediaWiki pages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

[SECURITY] [DSA 2596-1] mediawiki-extensions security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2596-1 [email protected] http://www.debian.org/security/ Jonathan Wiltshire December 30, 2012 http://www.debian.org/security/faq -...

DSA-2596-1 mediawiki-extensions - cross-site scripting in RSSReader extension

Bulletin has no description...

Joomla RSSReader Local File Inclusion

========================================================= Joomla Component comrssreader LFI Vulnerability ========================================================= +Title : Joomla Component comrssreader LFI Vulnerability +Software : comrssreader version 1.0 +Vendor : http://www.joomlashop.dk/...

CVE-2006-4762

Multiple cross-site scripting XSS vulnerabilities in Ykoon RssReader allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite...

CVE-2006-4762

Multiple cross-site scripting XSS vulnerabilities in Ykoon RssReader allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite...

CVE-2006-4762

Technical details about CVE-2006-4762 are not publicly provided in the supplied documents. Monitor for updates from NVD/CVE listings; current records describe XSS in Ykoon RssReader but lack specific affected versions, vectors, root cause, or fixes.