Grafana Explore Traces XSS

The vulnerability of the Explore Traces component of the Grafana monitoring and observation platform relates to the lack of security measures for the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code...

CVE-2026-25755

jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the argument of the "addJS" method allows an attacker to inject arbitrary PDF objects into the generated document. By crafting a payload that escapes the JavaScript string delimiter, an attacker can execute malicio...

Vzlet SP Code Execution

The vulnerability of the “Vzlet SP” software complex is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vzlet SP Code Execution

The vulnerability of the “Vzlet SP” software suite is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vzlet SP Code Execution

The vulnerability of the “Vzlet SP” software suite is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vzlet SP Code Execution

The vulnerability of the “Vzlet SP” software suite is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vzlet SP Code Execution

The vulnerability of the “Vzlet SP” software suite is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vzlet SP Code Execution

The vulnerability of the “Vzlet SP” software suite is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vzlet SP Code Execution

The vulnerability of the “Vzlet SP” software suite is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vzlet SP Code Execution

The vulnerability of the “Vzlet SP” software suite is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vzlet SP Code Execution

The vulnerability of the “Vzlet SP” software suite is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-39133

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the handling of unshare fs within the unshare2 system call. When CLONE NEWNS is present in the flags and current-fs has not been shared, copy mnt ns receives current-f...

GitLab XSS

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

ELMA365 HTML Injection

The vulnerability of the BPM platform for comprehensive process automation by ELMA365 is related to insufficient filtering and protection measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute HTML payloads without the ability to execute scripts...

Autodesk Fusion Web Disclosure Code Execution

The vulnerability of Autodesk Fusion’s 3D model development software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to disclose protected information and execute arbitrary code when a user opens a specially...

Piwigo SQL Injection

The vulnerability of the wsusergerList function in the pwg.users.php script of the Piwigo content management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to perform SQL injections...

Autodesk Fusion Web Disclosure Code Execution

The vulnerability of Autodesk Fusion’s 3D model development software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to disclose protected information and execute arbitrary code when a user opens a specially...

Azure HDInsight Data Analytics Service Spear Phishing

The vulnerability of the Azure HDInsight data analytics service is related to the lack of security measures for website structures. Exploiting this vulnerability could allow attackers to perform spear-phishing attacks remotely...

A Scan-Based Analysis of Internet-Exposed IoT Devices Using Shodan Data

An open measurement problem in IoT security is whether scan-observable network configurations encode population-level exposure risk beyond individual devices. An analysis of internet-exposed IoT endpoints using a controlled multi-country sample from Shodan Search and Shodan InternetDB, selecting...

GitLab Code Execution

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...