142 matches found
Haraj 3.7 - Cross-Site Scripting
Haraj 3.7 contains a cross-site scripting vulnerability in the User Upgrade Form. An attacker can inject malicious script and thus steal authentication credentials and launch other attacks. id: CVE-2022-31299 info: name: Haraj 3.7 - Cross-Site Scripting author: edoardottt severity: medium...
CVE-2023-25169
discourse-yearly-review is a discourse plugin which publishes an automated Year in Review topic. In affected versions a user present in a yearly review topic that is then anonymised will still have some data linked to its original account. This issue has been patched in commit b3ab33bbf7 which is...
CVE-2022-23223
On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later...
CVE-2022-31299
Haraj v3.7 was discovered to contain a reflected cross-site scripting XSS vulnerability in the User Upgrade Form...
CVE-2023-25167
Discourse is an open source discussion platform. In affected versions a malicious user can cause a regular expression denial of service using a carefully crafted git URL. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. There a...
CVE-2022-31038
Gogs is an open source self-hosted Git service. In versions of gogs prior to 0.12.9 DisplayName does not filter characters input from users, which leads to an XSS vulnerability when directly displayed in the issue list. This issue has been resolved in commit 155cae1d which sanitizes DisplayName...
EUVD-2022-7232
Malicious code in bioql PyPI...
EUVD-2024-0005
Malicious code in bioql PyPI...
EUVD-2024-0948
Malicious code in bioql PyPI...
EUVD-2024-46244
Malicious code in bioql PyPI...
EUVD-2023-0935
Malicious code in bioql PyPI...
EUVD-2022-52724
Malicious code in bioql PyPI...
EUVD-2022-41823
Malicious code in bioql PyPI...
EUVD-2023-0338
Malicious code in bioql PyPI...
EUVD-2022-6978
Malicious code in bioql PyPI...
EUVD-2024-24345
Malicious code in bioql PyPI...
EUVD-2024-41424
Malicious code in bioql PyPI...
EUVD-2023-0133
Malicious code in bioql PyPI...