1110 matches found
CVE-2025-63784
An Open Redirect vulnerability exists in the OAuth callback handler in file onlook/apps/web/client/src/app/auth/callback/route.ts in Onlook web application 0.2.32. The vulnerability occurs because the application trusts the X-Forwarded-Host header value without proper validation when constructing...
CVE-2025-63783
A Broken Object Level Authorization BOLA vulnerability was discovered in the tRPC project mutation APIs update, delete, add/remove tag of the Onlook web application 0.2.32. The vulnerability exists because the API fails to verify the ownership or membership of the currently authenticated user for...
CVE-2025-63783
A Broken Object Level Authorization BOLA vulnerability was discovered in the tRPC project mutation APIs update, delete, add/remove tag of the Onlook web application 0.2.32. The vulnerability exists because the API fails to verify the ownership or membership of the currently authenticated user for...
CVE-2024-14005 Nagios XI < 2024R1.2 Command Injection via Docker Wizard
Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...
CVE-2024-14005 Nagios XI < 2024R1.2 Command Injection via Docker Wizard
Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...
Ghost Web App Detection
Binary data ghostdetect.nbin...
MAL-2025-48833 Malicious code in detect-web-app (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in detect-web-app (npm)
--- -= Per source details. Do not edit below this line.=-...
Web-Application-Security-Testing
Web Application Security Testing — DVWA Lab End-to-end web ap...
CVE-2025-10240 Possibility of unintended actions when a user clicks a malicious link in the Progress Flowmon web application
A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated session...
PT-2025-41379
Name of the Vulnerable Software and Affected Versions Progress Flowmon versions prior to 12.5.5 Description A flaw exists in the Progress Flowmon web application that allows an attacker to manipulate authenticated users through malicious links. Clicking a crafted link can trigger unintended actio...
EUVD-2018-14649
Malware in sbrugna...
EUVD-2015-1762
Malware in sbrugna...
EUVD-2015-1758
Malware in sbrugna...
EUVD-2015-1759
Malware in sbrugna...
EUVD-2014-6220
Malware in sbrugna...
EUVD-2019-9831
Malware in sbrugna...
EUVD-2018-15896
Malware in sbrugna...