Improper Validation of Syntactic Correctness of Input

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input via improper handling of user-supplied URLs by using the startswith method in imageutils.py. An...

GHSA-M43G-M425-P68X

creationtimestamp| type| source ---|---|--- 2025-07-01 19:09:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20073...

The vulnerability of the NetWorker Management Console lies in the redirection of the URL to an unreliable website, allowing an attacker to disclose protected information.

The vulnerability of the NetWorker Management Console is related to the redirection of the URL to an unreliable website. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information...

PSONO Client 跨站脚本漏洞

PSONO Client is a PSONO client for psono individual developers. A cross-site scripting vulnerability exists in PSONO Client that stems from not properly cleaning URL fields, which could lead to cross-site scripting attacks...

GHSA-H499-PXGJ-QH5H

creationtimestamp| type| source ---|---|--- 2025-06-16 20:37:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18523...

Seeyon Zhiyuan OA 代码问题漏洞

Seeyon Zhiyuan OA Zhiyuan OA is a collaboration management software from China's Seeyon. A code issue vulnerability exists in Seeyon Zhiyuan OA 8.1 SP2 and prior versions, which stems from incorrect manipulation of the parameter url in the file...

CVE-2022-39196

Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Note: The vendor disputes this stating this cannot be reproduced...

CVE-2020-36624

A vulnerability was found in ahorner text-helpers up to 1.0.x. It has been declared as critical. This vulnerability affects unknown code of the file lib/texthelpers/translation.rb. The manipulation of the argument link leads to use of web link to untrusted target with window.opener access. The...

The vulnerability of the Continuous Integration and Deployment Application Delivery system (CI/CD) of JetBrains TeamCity lies in the redirection of URLs to an unreliable website, allowing attackers to redirect users to arbitrary URL addresses.

The vulnerability of the Continuous Integration and Deployment application delivery system CI/CD of TeamCity in JetBrains is related to the redirection of URLs to an unreliable website during the editing of the VCS root page. Exploiting this vulnerability could allow a malicious actor to redirect...

CVE-2025-39403

creationtimestamp| type| source ---|---|--- 2025-05-19 19:39:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16919...

GHSA-32X6-QVW6-MXJ4

creationtimestamp| type| source ---|---|--- 2025-04-23 19:05:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13117...

CVE-2022-31164

creationtimestamp| type| source ---|---|--- 2025-04-23 18:05:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13096...

libreoffice: Macro URL arbitrary script execution

A flaw was found in LibreOffice. In the affected versions of LibreOffice, a link in a browser using that scheme could be constructed with an embedded inner URL that, when passed to LibreOffice, could call internal macros with arbitrary arguments...

libreoffice: Macro URL arbitrary script execution

A flaw was found in LibreOffice. In the affected versions of LibreOffice, a link in a browser using that scheme could be constructed with an embedded inner URL that, when passed to LibreOffice, could call internal macros with arbitrary arguments...

Dell Unity 输入验证错误漏洞

Dell Unity is a mid-range storage array software from Dell EMC for data storage and management. Dell Unity suffers from a URL redirection vulnerability that stems from a URL redirection to an untrusted site, which could lead to a phishing attack. No details of the vulnerability are provided at th...

libreoffice: Macro URL arbitrary script execution

A flaw was found in LibreOffice. In the affected versions of LibreOffice, a link in a browser using that scheme could be constructed with an embedded inner URL that, when passed to LibreOffice, could call internal macros with arbitrary arguments...

Security Bulletin: IBM JRS (Jazz Reporting Service) uses a web link with untrusted references to an external site.

Summary IBM JRS Jazz Reporting Service uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims' web browser. The web application produces links to untrusted...

CVE-2024-53965

Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by a low privileged attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted UR...

GHSA-4VVJ-4CPR-P986

creationtimestamp| type| source ---|---|--- 2025-01-09 18:19:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1007 2025-10-14 05:07:38+00:00| seen| https://gist.github.com/Wbaker7702/53198661ba029cb1af08a9ce551dbeb5...

Security Bulletin: IBM Engineering Lifecycle Optimization - Engineering Publishing uses a web link with untrusted references to an external site.

Summary When an user clicks a link to an external site, and that link has the target="blank" attribute, then the new site will be opened into a new tab or window, but will share its process with the original tab or window. The window.opener object stores information from the original window, so i...