170 matches found
CVE-2025-4648 A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.
The content of a SVG file, received as input in Centreon web, was not properly checked. Allows Reflected XSS. A user with elevated privileges can inject JS script by altering the content of a SVG media, during the submit request. This issue affects web: from 24.10.0 before 24.10.5, from 24.04.0...
MAL-2025-3760 Malicious code in dependencyconfusion6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fde19a45f6be5b0f2c1ffc00fb381166f7ec0cbb3d1df2ba0d3e169faedcd72a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Kibana 7.17.x < 7.17.19 / 8.0.x < 8.13.0 File Upload (ESA-2024-47)
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...
MAL-2025-4251 Malicious code in veriftest1asdla (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e04795c3a8f7fae13a125bde307aa64db04ae9f4ff76bd1d11fb32b4d3f57a36 During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
CVE-2025-25016
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation...
BIT-KIBANA-2025-25016 Kibana Unrestricted Upload of File
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation...
CVE-2025-25016
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation...
CVE-2025-25016 Kibana Unrestricted Upload of File
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation...
CVE-2025-25016
CVE-2025-25016: Kibana suffers an Unrestricted File Upload weakness due to insufficient server-side validation, allowing an authenticated attacker to compromise software integrity by uploading a crafted file. Affected versions include Kibana 7.17.x before 7.17.19 and 8.0.x before 8.13.0. The issu...
CVE-2025-25016 Kibana Unrestricted Upload of File
Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation...
MAL-2025-3396 Malicious code in editor-inscriptions (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3383 Malicious code in chii-public (npm)
--- -= Per source details. Do not edit below this line.=-...
GO-2025-3633 GoBGP does not verify that the input length in github.com/osrg/gobgp
GoBGP does not verify that the input length in github.com/osrg/gobgp...
CVE-2025-30711
...
MAL-2025-2822 Malicious code in @uniqa/sales-ms-api (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2813 Malicious code in @uniqa/contract-ms-spec-api (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-20177
A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR image signature verification and load unverified software on an affected device. To exploit this vulnerability, the attacker must have root-system privileges on the...
MAL-2025-1951 Malicious code in unityeditor-cloud-hub (npm)
--- -= Per source details. Do not edit below this line.=-...