EUVD-2025-15790

Malicious code in bioql PyPI...

CVE-2025-49967

CVE-2025-49967 is a CSRF vulnerability in the WordPress plugin Live Sports Streamthunder (affected versions n/a through 2.1). The issue enables cross-site request forgery, allowing unauthorized actions on behalf of a logged-in user. Public sources in the connected documents identify the affected ...

Cross site scripting

A vulnerability in the web-based guest portal of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplied...

CVE-2019-1719 Cisco Identity Services Engine Cross-Site Scripting Vulnerability

A vulnerability in the web-based guest portal of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplied...