1110 matches found
Cross-site Scripting (XSS)
Overview Kentico.Xperience.AspNetCore.WebApp is an assemblies and content items required to integrate Kentico Xperience into ASP.NET Core applications. Affected versions of this package are vulnerable to Cross-site Scripting XSS through dangerous schemes allowed in the HtmlSanitizer class in the...
CVE-2025-26381 OpenBlue Mobile Web Application configuration issue for optional for OpenBlue Workplace (formerly FM Systems)
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information...
Description of the security update for Microsoft Exchange Server Subscription Edition RTM: December 9, 2025 (KB5071876)
None None...
Description of the security update for Microsoft Exchange Server 2019 CU14: December 9, 2025 (KB5071874)
None None...
CVE-2025-34260
Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/action/schedule endpoint. When an authenticated user adds a schedule to an existing task, the schedule name is stored and later rendered in schedule listings without HTML...
Vulnerable-Flask-Web-App-with-intentional-XSS-SQLi-flaws-
Vulnerable-Flask-Web-App-with-intentional-XSS-SQLi-flaws- A de...
CVE-2025-66221 vulnerabilities
Vulnerabilities for packages: mlflow...
GHSA-HGF8-39GV-G3F2 vulnerabilities
Vulnerabilities for packages: mlflow...
CVE-2025-66221 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, azure-functions-python-worker, superset, mlflow, tensorflow-cpu-jupyter, localstack...
GHSA-HGF8-39GV-G3F2 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, azure-functions-python-worker, superset, mlflow, tensorflow-cpu-jupyter, localstack...
CVE-2025-41087
Cross-Site Scripting XSS vulnerability stored in tha Taclia web application, where the uploaded SVG images are not properly sanitized. This allows to the attackers to embed malicious scripts in SVG files such as image profiles, which are then stored on the server and executed in the context of an...
CVE-2025-55796
OpenML Frontend (openml.org) web app version v2.0.20241110 is affected by a token-generation flaw. Tokens used for signup confirmation, password resets, email confirmations/resends, and email changes are MD5-based and generated from the current timestamp (format "%d %H:%M:%S") without user-specif...
The vulnerability in the web application for managing phpMyAdmin, related to the lack of protective measures for the web page structure, allows a perpetrator to execute arbitrary code.
The vulnerability in the web application for managing phpMyAdmin is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
EUVD-2025-150357
Bitplatform Boilerplate is a Visual studio and .NET project template. Versions prior to 9.11.3 are affected by a cross-site scripting XSS vulnerability in the WebInteropApp/WebAppInterop, potentially allowing attackers to inject malicious scripts that compromise the security and integrity of web...
CVE-2025-64710 Bitplatform Boilerplate has cross-site scripting vulnerability
Bitplatform Boilerplate is a Visual studio and .NET project template. Versions prior to 9.11.3 are affected by a cross-site scripting XSS vulnerability in the WebInteropApp/WebAppInterop, potentially allowing attackers to inject malicious scripts that compromise the security and integrity of web...
bit platform 跨站脚本漏洞
bit platform is an open source application builder from the Bit Foundation. A cross-site scripting vulnerability exists in bit platform versions prior to 9.11.3, which stems from the presence of cross-site scripting in WebInteropApp/WebAppInterop, which could lead to the injection of malicious...
pentest-scripts
Pentest Scripts - Unified Security Testing Framework 🎯 Qui...
CVE-2025-62074
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Amauri WPMobile.App wpappninja.This issue affects WPMobile.App: from n/a through = 11.71...
CVE-2025-63784
An Open Redirect vulnerability exists in the OAuth callback handler in file onlook/apps/web/client/src/app/auth/callback/route.ts in Onlook web application 0.2.32. The vulnerability occurs because the application trusts the X-Forwarded-Host header value without proper validation when constructing...