2734 matches found
HCL AION 安全漏洞
HCL AION is an AI lifecycle management platform from HCL India. HCL AION has a security vulnerability which is caused due to missing security attributes in the encrypted session SSL cookie. No details of the vulnerability are provided at this time...
PT-2025-41534
Name of the Vulnerable Software and Affected Versions Energy CRM version 2025 Description A stored Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data. A remote user can potentially send a malicious query to an authenticated user, potentially leading to the...
CVE-2025-61999
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to upload JavaScript or other content embedded in an SVG image used as a logo. Injected content is executed in the context of other users when they view affected pages. Successful exploitation allows the administrative user to perfo...
CVE-2025-61998: Improper Neutralization of Input During Web Page Generation
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content as a URL within the Technical Support Hyperlink Manager. Injected content is executed in the context of other users when they click the malicious link. Successful exploitation allows the...
CVE-2025-61996: Improper Neutralization of Input During Web Page Generation
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content within the Annual Report Template. Injected content is executed in the context of other users when they generate an Annual Report. Successful exploitation allows the administrative user to perfo...
CVE-2025-61999: Improper Neutralization of Input During Web Page Generation
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to upload JavaScript or other content embedded in an SVG image used as a logo. Injected content is executed in the context of other users when they view affected pages. Successful exploitation allows the administrative user to perfo...
CVE-2025-61997: Improper Neutralization of Input During Web Page Generation
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content within the Annual Report Enterprise Banner image upload field. Injected content is executed in the context of other users when they generate an Annual Report. Successful exploitation allows the...
CVE-2025-40649
Stored XSS in BBMRI-ERIC Negotiator v3.15.2 due to insufficient validation of user-supplied data in the text parameter of POST /api/v3/negotiations//posts. A remote attacker could craft input to exfiltrate or steal the cookie session details of an authenticated user. The issue is concrete in the ...
EUVD-2011-0426
Malware in sbrugna...
EUVD-2015-2020
Malware in sbrugna...
EUVD-2014-8362
Malware in sbrugna...
EUVD-2012-6003
Malware in sbrugna...
EUVD-2014-7707
Malware in sbrugna...
EUVD-2008-3648
Malware in sbrugna...
EUVD-2018-2763
Malware in sbrugna...
EUVD-2016-0386
Malware in sbrugna...
EUVD-2019-5972
Malware in sbrugna...
EUVD-2013-7172
Malware in sbrugna...