CVE-2025-43812

Cross-site scripting XSS vulnerability in web content template in Liferay Portal 7.4.3.4 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 allows remote authenticated users to inject arbitrary web script or HTML via a crafted...

CVE-2025-43812

Cross-site scripting XSS vulnerability in web content template in Liferay Portal 7.4.3.4 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 allows remote authenticated users to inject arbitrary web script or HTML via a crafted...

CVE-2025-43812

Cross-site scripting XSS vulnerability in web content template in Liferay Portal 7.4.3.4 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 allows remote authenticated users to inject arbitrary web script or HTML via a crafted...

The vulnerability of the Git-based software platform for collaborative code development on GitLab CE/EE is related to the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the Git-based software platform for collaborative code development on GitLab CE/EE is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Exploit for CVE-2025-39866

CVE-2025-39866 - use-after-free Author: Byte Reaper...

The vulnerability of the microprogrammed industrial digital gas analyzer MEAC300-FNADE4, related to the lack of protective measures for the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the microprogrammed industrial digital gas analyzer MEAC300-FNADE4 is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability in the web interface of Cisco IOS XE allows attackers to perform cross-site scripting attacks.

The vulnerability in the web interface of Cisco IOS XE operating systems is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability in the virtual learning environment Moodle, related to the lack of security measures for website structures, allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

The vulnerability of the FosWiki platform, related to the lack of measures taken to protect the website structure, allows attackers to gain unauthorized access to the protected information.

The vulnerability of the FosWiki platform lies in the lack of measures taken to protect the website’s structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

GO-2025-3963 Dragonfly incorrectly handles a task structure’s usedTrac field in d7y.io/dragonfly

Dragonfly incorrectly handles a task structure’s usedTrac field in d7y.io/dragonfly...

kernel: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice

A use-after-free UAF vulnerability, which also presents a potential infinite loop condition, has been resolved in the Linux kernel. This flaw affects the HFSC Hierarchical Fair Service Curve queuing discipline when it is used in conjunction with NETEM Network Emulation. A malicious user could...

kernel: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice

A use-after-free UAF vulnerability, which also presents a potential infinite loop condition, has been resolved in the Linux kernel. This flaw affects the HFSC Hierarchical Fair Service Curve queuing discipline when it is used in conjunction with NETEM Network Emulation. A malicious user could...

The vulnerability of the SolarWinds Serv-U File Server file server, related to the lack of protective measures for the website structure, allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the SolarWinds Serv-U File Server file server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the software solution for digital management of urban infrastructure, City Referential Manager, arises from the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the software solution for digital management of urban infrastructure, City Referential Manager, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the JEvents component of the Joomla! content management system allows a hacker to execute arbitrary code.

The vulnerability of the JEvents component in the Joomla! content management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the software for managing Product Managers, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Product Manager’s software management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Android operating system, related to the lack of measures taken to protect the SQL query structure, allows attackers to enhance their privileges.

The vulnerability of the Android operating system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of collaborative tool sets for content management and collaboration, as described in the Collaborative Industry Innovator, arises from the lack of measures to protect website structures. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the collaborative toolset for content collaboration and management in Collaborative Industry Innovator is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform...

The vulnerability of the ENOVIA Change Manager software for managing changes and configurations in engineering and manufacturing processes lies in the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the ENOVIA Change Manager software for managing changes and configurations in engineering and production processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

The vulnerability of the software solution for digital management of urban infrastructure, City Referential Manager, arises from the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the software solution for digital management of urban infrastructure, City Referential Manager, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...