CVE-2025-7182: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/modules/subject/edit.php. The manipulation of the argument pre leads to cross site scripting. The...

PT-2025-28468 · Itsourcecode · Itsourcecode Student Transcript Processing System

Name of the Vulnerable Software and Affected Versions: itsourcecode Student Transcript Processing System version 1.0 Description: A vulnerability has been found in the itsourcecode Student Transcript Processing System, affecting an unknown functionality of the file /admin/modules/subject/edit.php...

Itsourcecode Student Transcript Processing System Code Injection Vulnerability

itsourcecode Student Transcript Processing System is itsourcecode open source a student transcript processing system . A code injection vulnerability exists in itsourcecode Student Transcript Processing System version 1.0, which originates from improper manipulation of the parameter pre in the fi...

CVE-2025-46719

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.6, a vulnerability in the way certain html tags in chat messages are rendered allows attackers to inject JavaScript code into a chat transcript. The JavaScript code will be...

CVE-2025-1383

The Podlove Podcast Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.2. This is due to missing or incorrect nonce validation on the ajaxtranscriptdelete function. This makes it possible for unauthenticated attackers to delete...

CVE-2025-1383 Podlove Podcast Publisher <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete Function

The Podlove Podcast Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.2. This is due to missing or incorrect nonce validation on the ajaxtranscriptdelete function. This makes it possible for unauthenticated attackers to delete...

WordPress Podlove Podcast Publisher plugin <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete Function vulnerability

Cross-Site Request Forgery via ajaxtranscriptdelete Function vulnerability discovered by Abbas Mamoun in WordPress Plugin Podlove Podcast Publisher versions = 4.2.2...

PT-2025-9916

Name of the Vulnerable Software and Affected Versions Podlove Podcast Publisher plugin for WordPress versions up to and including 4.2.2 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the ajax transcript delete function. This allows...

agixt (>=1.4.65, <=1.7.11), atomic-agents (>=0.1.46, <=0.3.3) +24 more potentially affected by unknown CVE via youtube-transcript-api (>=0.1.4, <=0.6.2)

youtube-transcript-api PYPI version =0.1.4, =1.4.65, =0.1.46, =0.1.0, =10.8.3, =1.0.10, =0.1.1, =0.0.1, =0.5.0, =0.1.0, =0.3.4 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-YOUTUBETRANSCRIPTAPI-8446381...

XML External Entity (XXE) Injection

Overview youtube-transcript-api is a This is an python API which allows you to get the transcripts/subtitles for a given YouTube video. It also works for automatically generated subtitles, supports translating subtitles and it does not require a headless browser, like other selenium based solutio...

AI Transcript, Fake School Website: Student’s US Scholarship Scam Exposed on Reddit

You reap what you sow!...

transcript-open.de Cross Site Scripting vulnerability OBB-3891053

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Plonk verifier KZG multi point verification

Impact The vulnerability allows a third party to derive a valid proof from a valid initial tuple proof, publicinputs, corresponding to the same public inputs as the initial proof. It is due to a randomness being generated using a small part of the scratch memory describing the state, allowing for...

transcript-open.de Cross Site Scripting vulnerability OBB-3347534

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2018-11567

Prior to 2018-04-27, the reprompt feature in Amazon Echo devices could be misused by a custom Alexa skill. The reprompt feature is designed so that if Alexa does not receive an input within 8 seconds, the device can speak a reprompt, then wait an additional 8 seconds for input; if the user still...

CVE-2018-11567: Session Fixation

Prior to 2018-04-27, the reprompt feature in Amazon Echo devices could be misused by a custom Alexa skill. The reprompt feature is designed so that if Alexa does not receive an input within 8 seconds, the device can speak a reprompt, then wait an additional 8 seconds for input; if the user still...

Command injection

Security Onion Solutions Squert version 1.0.1 through 1.6.7 contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command OS Command Injection vulnerability in .inc/callback.php that can result in execution of OS Commands. This attack appear to be exploitable via Web reques...

nss security update

3.28.4-12 - Backport patch to simplify transcript calculation for CertificateVerify...

PowerShell Script Execution Troubleshooting Advice

Veeam Support Scope Per Veeam Support Policy: Custom script troubleshooting is not supported. What's in Scope: Confirming that the Veeam task executed the script. Assisting with Veeam PowerShell cmdlets not functioning as intended or documented. What's Out of Scope: Troubleshooting why a custom...

An overview of TLS 1.3

I presented TLS 1.3 to the CloudFlare London office. Why it's faster, how it works, why it's safer, what's clever about it. The talk is recorded and comes with colored diagrams. There's a transcript on the CloudFlare blog. Update: you might want to watch my 33c3 talk on the same topic instead. An...