1087 matches found
CVE-2025-26381 OpenBlue Mobile Web Application configuration issue for optional for OpenBlue Workplace (formerly FM Systems)
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information...
Description of the security update for Microsoft Exchange Server 2019 CU14: December 9, 2025 (KB5071874)
None None...
Description of the security update for Microsoft Exchange Server Subscription Edition RTM: December 9, 2025 (KB5071876)
None None...
CVE-2025-34260
Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/action/schedule endpoint. When an authenticated user adds a schedule to an existing task, the schedule name is stored and later rendered in schedule listings without HTML...
Vulnerable-Flask-Web-App-with-intentional-XSS-SQLi-flaws-
Vulnerable-Flask-Web-App-with-intentional-XSS-SQLi-flaws- A de...
GHSA-HGF8-39GV-G3F2 vulnerabilities
Vulnerabilities for packages: mlflow, superset...
CVE-2025-66221 vulnerabilities
Vulnerabilities for packages: mlflow, superset...
GHSA-HGF8-39GV-G3F2 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, tensorflow-cpu-jupyter, azure-functions-python-worker, mlflow, superset, localstack...
CVE-2025-66221 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, tensorflow-cpu-jupyter, azure-functions-python-worker, mlflow, superset, localstack...
CVE-2025-41087
Cross-Site Scripting XSS vulnerability stored in tha Taclia web application, where the uploaded SVG images are not properly sanitized. This allows to the attackers to embed malicious scripts in SVG files such as image profiles, which are then stored on the server and executed in the context of an...
CVE-2025-55796
OpenML Frontend (openml.org) web app version v2.0.20241110 is affected by a token-generation flaw. Tokens used for signup confirmation, password resets, email confirmations/resends, and email changes are MD5-based and generated from the current timestamp (format "%d %H:%M:%S") without user-specif...
CVE-2025-64710 Bitplatform Boilerplate has cross-site scripting vulnerability
Bitplatform Boilerplate is a Visual studio and .NET project template. Versions prior to 9.11.3 are affected by a cross-site scripting XSS vulnerability in the WebInteropApp/WebAppInterop, potentially allowing attackers to inject malicious scripts that compromise the security and integrity of web...
EUVD-2025-150357
Bitplatform Boilerplate is a Visual studio and .NET project template. Versions prior to 9.11.3 are affected by a cross-site scripting XSS vulnerability in the WebInteropApp/WebAppInterop, potentially allowing attackers to inject malicious scripts that compromise the security and integrity of web...
bit platform 跨站脚本漏洞
bit platform is an open source application builder from the Bit Foundation. A cross-site scripting vulnerability exists in bit platform versions prior to 9.11.3, which stems from the presence of cross-site scripting in WebInteropApp/WebAppInterop, which could lead to the injection of malicious...
pentest-scripts
Pentest Scripts - Unified Security Testing Framework 🎯 Qui...
CVE-2025-62074
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Amauri WPMobile.App wpappninja.This issue affects WPMobile.App: from n/a through = 11.71...
CVE-2025-63784
An Open Redirect vulnerability exists in the OAuth callback handler in file onlook/apps/web/client/src/app/auth/callback/route.ts in Onlook web application 0.2.32. The vulnerability occurs because the application trusts the X-Forwarded-Host header value without proper validation when constructing...
CVE-2025-63784
An Open Redirect vulnerability exists in the OAuth callback handler in file onlook/apps/web/client/src/app/auth/callback/route.ts in Onlook web application 0.2.32. The vulnerability occurs because the application trusts the X-Forwarded-Host header value without proper validation when constructing...
CVE-2025-63783
A Broken Object Level Authorization BOLA vulnerability was discovered in the tRPC project mutation APIs update, delete, add/remove tag of the Onlook web application 0.2.32. The vulnerability exists because the API fails to verify the ownership or membership of the currently authenticated user for...