9502 matches found
BIT-KIBANA-2025-25009 Kibana Cross-Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation in Kibana can lead to Stored XSS via case file upload...
PT-2025-53686
Name of the Vulnerable Software and Affected Versions SmarterTools SmarterMail versions prior to 100.0.9413 SmarterTools SmarterMail versions prior to 9483 Description An unrestricted upload of files with dangerous types allows an unauthenticated attacker to upload arbitrary files to any location...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via SVG files in diagram type products. An attacker can execute arbitrary web scripts or HTML in the context of a user's browser by uploading a specially crafted SVG file. Details Cross-site scripting or XSS is ...
CVE-2025-11351
A weakness has been identified in code-projects Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file /admin/editpicexec.php. This manipulation of the argument image causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has...
OPEXUS FOIAXpress security vulnerability
OPEXUS FOIAXpress is an information disclosure management software from OPEXUS USA. A security vulnerability exists in OPEXUS FOIAXpress versions prior to 11.13.3.0, which stems from allowing administrative users to upload SVG images embedded with JavaScript or other content, which could lead to...
Campcodes Advanced Online Voting Management System Code Issues and Vulnerabilities
CampCodes Advanced Online Voting Management System is an advanced online voting management system from CampCodes Philippines, Inc. A code issue vulnerability exists in Campcodes Advanced Online Voting Management System version 1.0, which stems from the incorrect manipulation of the parameter phot...
CVE-2025-61681
KUNO CMS is a fully deployable full-stack blog application. Versions 1.3.13 and below contain validation flaws in its file upload functionality that can be exploited for stored XSS. The upload endpoint only validates file types based on Content-Type headers, lacks file content analysis and...
CVE-2025-61772 Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)
Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2, Rack::Multipart::Parser can accumulate unbounded data when a multipart part’s header block never terminates with the required blank line CRLFCRLF. The parser keeps appending incoming bytes to memory witho...
EUVD-2012-4799
Malware in sbrugna...
EUVD-2018-13179
Malware in sbrugna...
EUVD-2013-1939
Malware in sbrugna...
EUVD-2019-17691
Malware in sbrugna...
EUVD-2007-6633
Malware in sbrugna...
EUVD-2013-2522
Malware in sbrugna...
EUVD-2010-2337
Malware in sbrugna...
EUVD-2008-6508
Malware in sbrugna...
EUVD-2006-3550
Malware in sbrugna...
EUVD-2017-18215
Malware in sbrugna...