CVE-2025-497077

creationtimestamp| type| source ---|---|--- 2025-08-13 05:22:17+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0249...

CVE-2025-8885

creationtimestamp| type| source ---|---|--- 2025-08-12 12:08:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw7bnh4j4r2s 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875 2026-02-20 14:25:07+00:00| seen|...

CVE-2025-42975 Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (BIC Document)

SAP NetWeaver Application Server ABAP BIC Document allows an unauthenticated attacker to craft a URL link which, when accessed on the BIC Document application, embeds a malicious script. When a victim clicks on this link, the script executes in the victim's browser, allowing the attacker to acces...

GHSA-XCXH-6CV4-Q8P8 HFS user adding a "web link" in HFS is vulnerable to "target=_blank" exploit

Summary When adding a "web link" to the HFS virtual filesystem, the frontend opens it with target="blank" but without the rel="noopener noreferrer" attribute. This allows the opened page to use the window.opener property to change the location of the original HFS tab. Details While most modern...

HFS user adding a "web link" in HFS is vulnerable to "target=_blank" exploit

Summary When adding a "web link" to the HFS virtual filesystem, the frontend opens it with target="blank" but without the rel="noopener noreferrer" attribute. This allows the opened page to use the window.opener property to change the location of the original HFS tab. Details While most modern...

PT-2025-34325 · Npm · Hfs

Summary When adding a "web link" to the HFS virtual filesystem, the frontend opens it with target=" blank" but without the rel="noopener noreferrer" attribute. This allows the opened page to use the window.opener property to change the location of the original HFS tab. Details While most modern...

PT-2025-32604 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP affected versions not specified Description: SAP NetWeaver Application Server for ABAP is susceptible to a cross-site scripting issue. An unauthenticated attacker can create a URL containing a malicio...

CVE-2025-8814

creationtimestamp| type| source ---|---|--- 2025-08-10 18:11:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw2uz5eerv2e...

CVE-2025-4576

creationtimestamp| type| source ---|---|--- 2025-08-09 22:06:01+00:00| seen| https://gist.github.com/bolhasec/e6c336b3013233969c0fdbe523deab57 2026-03-26 12:26:37+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-4576.yaml 2026-03-30...

CVE-2025-33014

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the...

Roundup 跨站脚本漏洞

Roundup is an open source command line, web and email issue tracking system from Roundup. The system provides bug tracking, customer help desk and issue management. A cross-site scripting vulnerability exists in versions prior to Roundup 2.5.0, which stems from improper URL and template...

Improper Validation of Syntactic Correctness of Input

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input via improper handling of user-supplied URLs by using the startswith method in imageutils.py. An...

GHSA-M43G-M425-P68X

creationtimestamp| type| source ---|---|--- 2025-07-01 19:09:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20073...

The vulnerability of the NetWorker Management Console lies in the redirection of the URL to an unreliable website, allowing an attacker to disclose protected information.

The vulnerability of the NetWorker Management Console is related to the redirection of the URL to an unreliable website. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information...

PSONO Client 跨站脚本漏洞

PSONO Client is a PSONO client for psono individual developers. A cross-site scripting vulnerability exists in PSONO Client that stems from not properly cleaning URL fields, which could lead to cross-site scripting attacks...

GHSA-H499-PXGJ-QH5H

creationtimestamp| type| source ---|---|--- 2025-06-16 20:37:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18523...

Seeyon Zhiyuan OA 代码问题漏洞

Seeyon Zhiyuan OA Zhiyuan OA is a collaboration management software from China's Seeyon. A code issue vulnerability exists in Seeyon Zhiyuan OA 8.1 SP2 and prior versions, which stems from incorrect manipulation of the parameter url in the file...

CVE-2022-39196

Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Note: The vendor disputes this stating this cannot be reproduced...

CVE-2020-36624

A vulnerability was found in ahorner text-helpers up to 1.0.x. It has been declared as critical. This vulnerability affects unknown code of the file lib/texthelpers/translation.rb. The manipulation of the argument link leads to use of web link to untrusted target with window.opener access. The...

The vulnerability of the Continuous Integration and Deployment Application Delivery system (CI/CD) of JetBrains TeamCity lies in the redirection of URLs to an unreliable website, allowing attackers to redirect users to arbitrary URL addresses.

The vulnerability of the Continuous Integration and Deployment application delivery system CI/CD of TeamCity in JetBrains is related to the redirection of URLs to an unreliable website during the editing of the VCS root page. Exploiting this vulnerability could allow a malicious actor to redirect...