CVE-2025-2613: Improper Neutralization of Input During Web Page Generation

The Login Manager – Design Login Page, View Login Activity, Limit Login Attempts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom logo and background URLs in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes...

CVE-2022-25356: XML Injection (aka Blind XPath Injection)

Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection...

PT-2022-17235

Name of the Vulnerable Software and Affected Versions Alt-N MDaemon Security Gateway versions prior to 8.5.1 Description The issue allows for XML Injection through the SecurityGateway.dll, specifically when accessing the "view=login" API endpoint. Recommendations For versions prior to 8.5.1, upda...