706 matches found
Apache Geode 安全漏洞
Apache Geode is a U.S.-based Apache Foundation suite of management platforms used in distributed cloud architectures to provide real-time and consistent access to data for data-intensive applications. A security vulnerability exists in Apache Geode versions prior to 1.15.2 that originates from we...
Siemens SiPass integrated 跨站脚本漏洞
Siemens SiPass Integrated is a powerful and extremely flexible access control system from Siemens, Germany. A cross-site scripting vulnerability exists in versions prior to Siemens SiPass integrated V3.0, which stems from susceptibility to a stored cross-site scripting attack that could allow an...
CVE-2025-40640
Energy CRM v2025 (Status Tracker Ltd) contains a stored Cross-Site Scripting (XSS) flaw exploitable via a POST to /crm/create_invoice_submit.php using the customerName_0 parameter. Lack of input validation allows a remote attacker to craft a query that could be processed by an authenticated user,...
CVE-2025-61998
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content as a URL within the Technical Support Hyperlink Manager. Injected content is executed in the context of other users when they click the malicious link. Successful exploitation allows the...
CVE-2025-61999 OPEXUS FOIAXpress stored XSS via logo image
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to upload JavaScript or other content embedded in an SVG image used as a logo. Injected content is executed in the context of other users when they view affected pages. Successful exploitation allows the administrative user to perfo...
CVE-2025-61998 OPEXUS FOIAXpress stored XSS via Hyperlink Manager
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content as a URL within the Technical Support Hyperlink Manager. Injected content is executed in the context of other users when they click the malicious link. Successful exploitation allows the...
CVE-2025-61996 OPEXUS FOIAXpress stored XSS via annual report template
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content within the Annual Report Template. Injected content is executed in the context of other users when they generate an Annual Report. Successful exploitation allows the administrative user to perfo...
EUVD-2018-0142
Malware in sbrugna...
EUVD-2018-6584
Malware in sbrugna...
EUVD-2021-10049
Malware in sbrugna...
EUVD-2018-5351
Malware in sbrugna...
EUVD-2021-0652
Malware in sbrugna...
EUVD-2018-17474
Malware in sbrugna...
EUVD-2017-6818
Malware in sbrugna...
EUVD-2018-5352
Malware in sbrugna...
EUVD-2012-2750
Malware in sbrugna...
EUVD-2020-19251
Malware in sbrugna...
EUVD-2018-20460
Malware in sbrugna...