8540 matches found
Rolantis Agentis 授权问题漏洞
Rolantis Agentis is a software for enterprise information management and automated processing from the Turkish company Rolantis. An authorization issue vulnerability exists in Rolantis Agentis versions prior to 4.44 that stems from a session fixation issue that could lead to session hijacking...
CVE-2025-59429: Improper Neutralization of Input During Web Page Generation
FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.0.18.38 for FreePBX 17, a reflected cross-site scripting vulnerability is present on the Asterisk HTTP Status page. The Asterisk HTTP status page is exposed by FreePBX and ...
PT-2025-41864
Name of the Vulnerable Software and Affected Versions Rolantis Information Technologies Agentis versions prior to 4.44 Description A session fixation issue exists in Rolantis Information Technologies Agentis. This allows an attacker to set or manipulate a user's session identifier before...
CVE-2025-25017
A Cross-Site Scripting XSS vulnerability in Kibana’s Vega visualization engine. It results from improper input validation in Vega visualization specifications, allowing attackers to inject malicious JavaScript. Successful exploitation could lead to session hijacking, data theft, or privilege...
GHSA-29MF-W486-V3VC Bagisto is vulnerable to XSS through Admin Panel's product creation path
An authenticated stored XSS vulnerability exists in the Bagisto 2.3.6 admin panel's product creation path, allowing an attacker to upload a crafted SVG file containing malicious JavaScript code. This vulnerability can be exploited by an authenticated admin user to execute arbitrary JavaScript in...
Cross-site Scripting (XSS)
Overview bagisto/bagisto is a hand tailored E-Commerce framework designed on some opensource technologies such as Laravel a PHP framework, Vue.js a progressive Javascript framework. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Admin Panel. An attacker can...
CVE-2025-60880: Improper Neutralization of Input During Web Page Generation
An authenticated stored XSS vulnerability exists in the Bagisto 2.3.6 admin panel's product creation path, allowing an attacker to upload a crafted SVG file containing malicious JavaScript code. This vulnerability can be exploited by an authenticated admin user to execute arbitrary JavaScript in...
CVE-2025-61319
ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting XSS vulnerability in the Vulnerabilities module. When scanning a target with an XSS payload, the unsanitized payload is rendered in the ReNgine web UI, resulting in arbitrary JavaScript execution in the victim's browser. This can b...
CVE-2025-61999
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to upload JavaScript or other content embedded in an SVG image used as a logo. Injected content is executed in the context of other users when they view affected pages. Successful exploitation allows the administrative user to perfo...
EUVD-2006-6511
Malware in sbrugna...
EUVD-2007-2539
Malware in sbrugna...
EUVD-2020-17417
Malware in sbrugna...
EUVD-2007-4186
Malware in sbrugna...
EUVD-2003-1239
Malware in sbrugna...
EUVD-2013-2936
Malware in sbrugna...
EUVD-2001-1509
Malware in sbrugna...
EUVD-2010-0585
Malware in sbrugna...
EUVD-2015-2892
Malware in sbrugna...