828 matches found
CVE-2025-50977
A template injection vulnerability leading to reflected cross-site scripting XSS has been identified in version 1.7.1, requiring authenticated admin access for exploitation. The vulnerability exists in the 'r' parameter and allows attackers to inject malicious Angular expressions that execute...
PT-2025-34902 · Wicket · Wicket
Name of the Vulnerable Software and Affected Versions: versions prior to 1.7.1 Description: A template injection vulnerability leading to reflected cross-site scripting XSS has been identified, requiring authenticated admin access for exploitation. The vulnerability exists in the r parameter and...
CVE-2025-50977
Gitblit (version 1.7.1) contains a template injection vulnerability that enables reflected XSS via the r parameter. Exploitation requires authenticated admin access and can be triggered through GET requests to the /summary endpoint or POST requests to certain Wicket interfaces, enabling injection...
Malicious code in @espace-client-axafr/savings-summary-card (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41897 Malicious code in @espace-client-axafr/savings-summary-card (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in symphony-summary (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6961 Malicious code in symphony-summary (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-22011 Malicious code in gsf.billing-summary (npm)
The package gsf.billing-summary was found to contain malicious code...
Malicious code in gsf.billing-summary (npm)
The package gsf.billing-summary was found to contain malicious code...
Visualize Security Success with the Security Summary Dashboard
...
Linux Distros Unpatched Vulnerability : CVE-2024-26879
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: clk: meson: Add missing clocks to axgclkregmaps Some clocks were missing from axgclkregmaps,...
CVE-2025-47219
creationtimestamp| type| source ---|---|--- 2025-08-07 21:46:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvtplwgngx2l 2025-10-28 02:53:50+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m47wk3giz72r 2025-10-28 02:54:00+00:00| seen|...
jffs2: check that raw node were preallocated before writing summary
...
MAL-2025-6698 Malicious code in balances-summary-widget (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in balances-summary-widget (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in goals-summary-widget (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6724 Malicious code in goals-summary-widget (npm)
The package communicates with a domain associated with malicious activity...
Medtronic MyCareLink Patient Monitor (Update A)
RISK EVALUATION Successful exploitation of these vulnerabilities could lead to system compromise, unauthorized access to sensitive data, and manipulation of the monitor's functionality. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment...
Schneider Electric EcoStruxure Power Operation (Update A)
RISK EVALUATION Successful exploitation of these vulnerabilities could result in the loss of system functionality or unauthorized access to system functions. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. CISA...
LITEON IC48A and IC80A EV Chargers
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access sensitive information when accessing the Liteon EV chargers. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:...