5580 matches found
Smoothwall Express Cross-Site Scripting Vulnerability (CNVD-2026-14288)
Smoothwall Express is Smoothwall open source a GNU/Linux-based firewall operating system . Smoothwall Express cross-site scripting vulnerability , the vulnerability stems from the urlfilter.cgi endpoint in the REDIRECTPAGE or CHILDREN parameter on the user-supplied data lack of effective filterin...
CVE-2026-27013 Fabric.js Affected by Stored XSS via SVG Export
Fabric.js is a Javascript HTML5 canvas library. Prior to version 7.2.0, Fabric.js applies escapeXml to text content during SVG export src/shapes/Text/TextSVGExportMixin.ts:186 but fails to apply it to other user-controlled string values that are interpolated into SVG attribute markup. When...
WordPress Gotham Block Extra Light plugin cross-site scripting vulnerability
The WordPress Gotham Block Extra Light plugin is a tool for detecting if ad blocking software such as AdBlock is enabled in a visitor's browser. The WordPress Gotham Block Extra Light plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective...
CVE-2019-11574
An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...
Soda PDF Desktop Out-of-Bounds Read Vulnerability
Soda PDF Desktop is a professional PDF processing software that integrates reading, editing, creating, converting and managing PDF documents. Soda PDF Desktop has an out-of-bounds read vulnerability that stems from a lack of validation of user-supplied data when parsing PDF files, which can be...
WordPress iframe plugin cross-site scripting vulnerability
The WordPress iframe plugin is a tool for embedding iFrame content in WordPress websites, allowing users to embed external web pages, videos, forms, etc. into their pages. WordPress iframe plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective...
WordPress Captivate Sync plugin deserialization vulnerability
WordPress Captivate Sync plugin is a WordPress plugin developed by Captivate, which belongs to RebelBaseMedia's products and is mainly used to simplify the Podcast management process. WordPress Captivate Sync plugin suffers from a deserialization vulnerability that stems from unsafe deserializati...
EUVD-2020-3055
Malware in sbrugna...
EUVD-2017-15547
Malware in sbrugna...
EUVD-2017-15454
Malware in sbrugna...
EUVD-2021-18252
Malware in sbrugna...
EUVD-2020-19526
Malware in sbrugna...
EUVD-2020-19528
Malware in sbrugna...
EUVD-2019-5565
Malware in sbrugna...
EUVD-2017-15593
Malware in sbrugna...
EUVD-2017-15961
Malware in sbrugna...
EUVD-2017-15963
Malware in sbrugna...
EUVD-2021-12562
Malware in sbrugna...