1798 matches found
CVE-2025-8740
CVE-2025-8740 affects zhenfeng13 My-Blog up to version 1.0.0. The vulnerability is a cross-site scripting in the Category Handler’s unknown function for the file path /admin/categories/save, triggered by manipulating the argument categoryName . It allows remote exploitation and the exploit has be...
CVE-2025-8740 zhenfeng13 My-Blog Category save cross site scripting
A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categories/save of the component Category Handler. The manipulation of the argument categoryName leads to cross site scripting. It is possible to...
MAL-2025-6807 Malicious code in beliya-xhn1355h (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb12c022ad28a9da424215c58d549881c781f4a43a089c0548c0d97803a7154a The OpenSSF Package Analysis project identified 'beliya-xhn1355h' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
PT-2025-32411 · Myblog · Myblog
Name of the Vulnerable Software and Affected Versions: zhenfeng13 My-Blog versions up to 1.0.0 Description: A cross-site request forgery issue exists due to the manipulation of the tagName argument in the processing of the /admin/tags/save API endpoint. The attack can be initiated remotely. The...
My-Blog 安全漏洞
My-Blog is ZHENFENG13 individual developer by SpringBoot + Mybatis + Thymeleaf and other technologies to achieve the Java blog system, page beautiful, full-featured, easy to deploy and perfect code. A security vulnerability exists in My-Blog 1.0.0 and earlier versions, which stems from a cross-si...
PT-2025-32412 · Zhenfeng13 · Myblog
Name of the Vulnerable Software and Affected Versions: zhenfeng13 My-Blog versions up to 1.0.0 Description: A cross-site scripting issue exists in zhenfeng13 My-Blog up to version 1.0.0. The issue is related to the manipulation of the categoryName argument within an unknown function of the...
FreeFloat FTP Server 安全漏洞
FreeFloat FTP Server is an FTP service from FreeFloat, Inc. A security vulnerability exists in FreeFloat FTP Server version 1.0.0 that stems from not properly validating USER command input and could lead to a buffer overflow and arbitrary code execution...
CVE-2025-54298
A stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla was discovered...
CVE-2025-54298 Extension - firecoders.com - Stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla
A stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla was discovered...
bsc Peru Cocktails App 安全漏洞
The bsc Peru Cocktails App is a Peruvian cocktails app by bsc. A security vulnerability exists in bsc Peru Cocktails App version 1.0.0, which stems from improper component export in the file AndroidManifest.xml...
TOTOLINK X15 安全漏洞
TOTOLINK X15 is a network wireless extender from China Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK X15 version 1.0.0-B20230714.1105, which originates from a buffer overflow in the parameter submit-url of file /boafrm/formRoute in the component HTTP POST Request Handler...
PT-2025-31023 · Totolink · Totolink X15
Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical vulnerability exists in the HTTP POST Request Handler component of TOTOLINK X15. The vulnerability is located in the unknown code of the /boafrm/formFilter file and results in ...
Balbooa Gallery 跨站脚本漏洞
Balbooa Gallery is a Joomla extension from Balbooa Inc. A cross-site scripting vulnerability exists in Balbooa Gallery versions 1.0.0-2.4.0, which stems from a stored cross-site scripting attack...
Joomcar Extensions Articles Good Search SQL注入漏洞
Joomcar Extensions Articles Good Search is a Joomla plugin from Joomcar Extensions, Inc. A SQL injection vulnerability exists in Joomcar Extensions Articles Good Search versions 1.0.0 through 1.2.4.0011, which stems from vulnerability to SQL injection attacks...
Joomsky JS Jobs SQL注入漏洞
Joomsky JS Jobs is a Joomla Content Management System CMS based recruitment management plugin from Joomsky. A SQL injection vulnerability exists in Joomsky JS Jobs versions 1.0.0 through 1.4.1, which stems from an incorrect manipulation of the parameter cvid resulting in a SQL injection attack...
Joomcar Extensions Articles Calendar 注入漏洞
Joomcar Extensions Articles Calendar is a Joomla plugin from Joomcar Extensions. A SQL injection vulnerability exists in Joomcar Extensions Articles Calendar versions 1.0.0 through 1.0.1.0007, which stems from vulnerability to SQL injection attacks...
Highsun OA 安全漏洞
Highsun OA is an office collaboration software from China's Haichang Information Highsun Company. A security vulnerability exists in Highsun OA version v.1.0.0, which originates from a SQL injection vulnerability in the if parameter in hcit.project.rte.agents.UploadImages.class, which could lead ...
WordPress plugin Contact Form 7 Editor Button 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...
PT-2025-29803 · Arisoft · Arisoft Contact Form 7 Editor Button
Name of the Vulnerable Software and Affected Versions: arisoft Contact Form 7 Editor Button versions through 1.0.0 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for potential malicious...