1591 matches found
CVE-2025-67724
Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, the supplied reason phrase is used unescaped in HTTP headers where it could be used for header injection or in HTML in the default error page where it could be used for XSS and can be exploited by...
CVE-2016-20023
In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the correct path to a file was provided...
PT-2025-48816
Name of the Vulnerable Software and Affected Versions ERPNext version 15.83.2 Frappe Framework version 15.86.0 Description Improper validation of uploaded SVG avatar images allows attackers to embed malicious JavaScript. The payload executes when an administrator clicks the image link to view the...
CVE-2025-64764
Astro is a web framework. Prior to version 5.15.8, a reflected XSS vulnerability is present when the server islands feature is used in the targeted application, regardless of what was intended by the component templates. This issue has been patched in version 5.15.8...
PT-2025-47490
Name of the Vulnerable Software and Affected Versions Astro versions prior to 5.15.9 Description Astro, a web framework, has an issue when using the Cloudflare adapter @astrojs/cloudflare with output set to 'server'. The image optimization endpoint '/ image' includes a flaw in the isRemoteAllowed...
CVE-2025-64764: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Astro is a web framework. Prior to version 5.15.8, a reflected XSS vulnerability is present when the server islands feature is used in the targeted application, regardless of what was intended by the component templates. This issue has been patched in version 5.15.8...
adaptivewaf
Adaptive Web Application Firewall WAF - v1 Rule-Based A hob...
exploit
It is an offensive tool for web applications. The repository con...
CVE-2025-62407
CVE-2025-62407 affects the Frappe web framework. An open redirect was possible on the login page via the redirect parameter for versions prior to 14.98.0 and 15.83.0 . The issue is fixed in those respective versions (14.98.0 and 15.83.0). As described in connected sources, upgrading to 14.98.0 or...
dotnet: .NET Security Feature Bypass Vulnerability
A flaw was found in ASP.NET Core’s HTTP request handling that leads to inconsistent interpretation of specially crafted HTTP requests. This mismatch can be abused by an authorized network attacker to smuggle or manipulate request boundaries, allowing bypass of security controls or unintended...
EUVD-2017-12950
Malware in sbrugna...
EUVD-2016-7327
Malware in sbrugna...
EUVD-2014-3359
Malware in sbrugna...
EUVD-2014-3421
Malware in sbrugna...
EUVD-2018-7325
Malware in sbrugna...
EUVD-2014-3357
Malware in sbrugna...
EUVD-2020-0380
Malware in sbrugna...
EUVD-2018-1092
Malware in sbrugna...