13120 matches found
BIT-GITLAB-2025-4439 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed an authenticated user to perform cross-site scripting attacks when the instance is served through certain content delivery networks...
BELL-CVE-2025-8283
Bulletin has no description...
BELL-CVE-2025-38483
Bulletin has no description...
BELL-CVE-2025-38491
Bulletin has no description...
BELL-CVE-2025-38477
Bulletin has no description...
BELL-CVE-2025-8176
Bulletin has no description...
BELL-CVE-2025-38472
Bulletin has no description...
BELL-CVE-2025-38494
Bulletin has no description...
BELL-CVE-2025-38474
Bulletin has no description...
MAL-2025-6336 Malicious code in testing123kk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 bebd39f4de86af5e9634fbfda5f8c97794b597b1066c2fcd32e3a2068569280d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-6347 Malicious code in yaetia (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d95f6b127a40fcc4c4557dc3e26a11a6136d8837c28b9a32663f3a7a14a1c13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WordPress Appzend Theme <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)
Software Appzend Type Theme Vulnerable versions = 1.2.6 Fixed in 1.2.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2025-5587 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 9aa23509b5fd Credits Peter Thaleikis Required privileg...
CVE-2025-51044
phpgurukul Nipah virus NiV Testing Management System 1.0 contains a SQL injection vulnerability in the /new-user-testing.php file, due to insufficient validation of user input for the " govtissuedid" parameter...
CVE-2024-43018
Piwigo 13.8.0 and below is vulnerable to SQL Injection in the parameters maxlevel and minregister. These parameters are used in wsusergerList function from file include\wsfunctions\pwg.users.php and this same function is called by ws.php file at some point can be used for searching users in...
GO-2025-3773 Ackites KillWxapkg vulnerable to OS Command Injection in github.com/Ackites/KillWxapkg
Ackites KillWxapkg vulnerable to OS Command Injection in github.com/Ackites/KillWxapkg...
GO-2025-3779 Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app
Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app...
GO-2025-3811 File Browser's Uncontrolled Memory Consumption vulnerability can enable DoS attack due to oversized file processing in github.com/filebrowser/filebrowser
File Browser's Uncontrolled Memory Consumption vulnerability can enable DoS attack due to oversized file processing in github.com/filebrowser/filebrowser...
GO-2025-3767 OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr
OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr...
GO-2025-3781 Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus
Incus Allocation of Resources Without Limits allows firewall rule bypass on managed bridge networks in github.com/lxc/incus...