150552 matches found
The vulnerability of the Capacity Planning Report component of the Nagios XI monitoring tool allows a attacker to execute arbitrary code.
The vulnerability of the Capacity Planning Report component in the Nagios XI monitoring tool is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
The vulnerability of the Dynamics 365 Field Service software, related to the lack of measures taken to protect the website structure, allows attackers to carry out spoofing attacks.
The vulnerability of the Dynamics 365 Field Service software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow attackers to carry out spoofing attacks...
Responsive Hotel Site reservation.php File SQL Injection Vulnerability
Responsive Hotel Site is a responsive hotel website. Responsive Hotel Site suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /admin/reservation.php. An attacker can exploit this vulnerabilit...
The vulnerability of the Dynamics 365 Field Service resource planning software lies in the lack of protective measures for the website structure, allowing attackers to perform spear-phishing attacks.
The vulnerability of the Dynamics 365 Field Service resource planning software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
The vulnerability of the SuiteCRM customer relationship management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the SuiteCRM customer relationship management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issue: Mozilla Thunderbird is updated to 140.4. changed: Account Hub is now disabled by default for second email account bmo1992027 changed: Flatpak runtime has been updated to Freedesktop SDK 24.08 bmo1952100 fixed: Users could not read mail...
DotNetNuke < 10.1.1 Unrestricted File Upload
DotNetNuke CMS versions prior to 10.1.1 are affected by an unrestricted file upload vulnerability due to improper validation of uploaded files in the default HTML editor provider. This vulnerability allows unauthenticated users to upload files without proper restrictions, potentially leading to...
demo_web_attacks
demowebatta...
U.S. Dept Of Defense: DNN - Unrestricted Arbitrary File Upload #████████
A vulnerability was discovered in versions of DNN formerly DotNetNuke prior to 10.1.1. The vulnerability was caused by the default HTML editor provider allowing unauthenticated file uploads and overwriting of existing files. This could have led to website defacement and cross-site scripting attac...
CVE-2025-11162: Improper Neutralization of Input During Web Page Generation
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS in all versions up to, and including, 2.19.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...
CVE-2025-64110
creationtimestamp| type| source ---|---|--- 2025-11-04 12:39:54+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3m4skkioyf22o 2025-11-05 02:02:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4txg66yw62s 2025-11-05 03:30:47+00:00| seen|...
DEBIAN-CVE-2025-43480
The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious website may exfiltrate data cross-origin...
UBUNTU-CVE-2025-43392
The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A website may exfiltrate image data cross-origin...
CVE-2025-43493
The issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Visiting a malicious website may lead to address bar spoofing...
CVE-2025-43503
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Visiting a malicious website may lead to user interface spoofing...
CVE-2025-43480
The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious website may exfiltrate data cross-origin...
Apple多款产品 安全漏洞
website is a library from Challenge open source. Contains files for the new DIKULAN website not dependent on Joomla. ch is a ClickHouse open source low-level Go client for ClickHouse. A security vulnerability exists in several Apple products that stems from the fact that accessing a malicious...
The vulnerability of the BIND DNS server, related to the loading of external, unreliable data alongside reliable data, allows a hacker to redirect traffic to a malicious website.
The vulnerability of the BIND DNS server relates to the loading of external, unreliable data alongside reliable data. Exploiting this vulnerability allows a malicious actor to remotely redirect traffic to a malicious website...
EUVD-2025-37192
A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/managewebsite.php component. An authenticated user with administrative privileges can leverage this flaw by submitting a specially crafted POST request, enabling the deletion of...
