141 matches found
Composer syncCodeBase Command Injection
The vulnerability of the syncCodeBase function in the Composer dependency management tool is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary commands through specially created source URLs or URLs...
CVE-2025-40986
Reflected Cross-Site Scripting XSS vulnerability in PideTuCita. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL using the endpoint 'cookies/indes.php/'. This vulnerability can be exploited to steal confidential user data,...
CVE-2026-1437
Graylog Web Interface console 2.2.3 contains a reflected XSS flaw due to insufficient sanitization/escaping of HTML output. Several endpoints may echo parts of the URL in responses, enabling arbitrary JavaScript execution when a user visits a crafted URL. The vulnerability could allow script exec...
PT-2026-3595
A reflected cross-site scripting xss vulnerability exists in the modifyTranscript functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...
CVE-2022-31246
paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a payment request e.g., within QR code data. On Windows, this can lead to capture of credentials over SMB. On Linux and UNIX, it can lead to a denial of service by specifying the /dev/zero filename...
CVE-1999-0347
Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character...
CVE-2025-64781
In GroupSession Free edition prior to ver5.7.1, GroupSession byCloud prior to ver5.7.1, and GroupSession ZION prior to ver5.7.1, "External page display restriction" is set to "Do not limit" in the initial configuration. With this configuration, the user may be redirected to an arbitrary website...
EUVD-2019-7447
Malware in sbrugna...
EUVD-2009-3040
Malware in sbrugna...
EUVD-2002-0309
Malware in sbrugna...
EUVD-2002-1374
Malware in sbrugna...
EUVD-2018-1948
Malware in sbrugna...
EUVD-2005-0690
Malware in sbrugna...
EUVD-2013-1150
Malware in sbrugna...
EUVD-2012-1126
Malware in sbrugna...
EUVD-2006-6618
Malware in sbrugna...
EUVD-2002-2347
Malware in sbrugna...
EUVD-2013-4914
Malware in sbrugna...