CVE-2025-64711 PrivateBin vulnerable to malicious filename use for self-XSS / HTML injection locally for users

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Starting in version 1.7.7 and prior to version 2.0.3, dragging a file whose filename contains HTML is reflected verbatim into the page via the drag-and-drop helper, so any user who drops a crafted file on...

EUVD-2018-13403

Malware in sbrugna...

EUVD-2018-13441

Malware in sbrugna...

EUVD-2018-13413

Malware in sbrugna...

EUVD-2018-13491

Malware in sbrugna...

EUVD-2020-21518

Malware in sbrugna...

EUVD-2020-18745

Malware in sbrugna...

EUVD-2019-7783

Malware in sbrugna...

EUVD-2016-1845

Malware in sbrugna...

EUVD-2016-1807

Malware in sbrugna...

EUVD-2019-7807

Malware in sbrugna...

EUVD-2020-18744

Malware in sbrugna...

EUVD-2020-18741

Malware in sbrugna...

EUVD-2019-16543

Malware in sbrugna...

EUVD-2020-0531

Malware in sbrugna...

EUVD-2018-10432

Malware in sbrugna...

EUVD-2018-4540

Malware in sbrugna...

EUVD-2019-16541

Malware in sbrugna...

EUVD-2020-2576

Malware in sbrugna...

EUVD-2018-13415

Malware in sbrugna...