org.xwiki.rendering:xwiki-rendering-macro-html (7.2-milestone-2), org.xwiki.rendering:xwiki-rendering-standalone (7.2-milestone-2) +11 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (7.2-milestone-2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 7.2-milestone-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 7.2-milestone-2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (7.3-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (7.3-milestone-1) +11 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (7.3-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 7.3-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 7.3-milestone-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.4.4), org.xwiki.rendering:xwiki-rendering-standalone (13.4.4) +8 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (13.4.4)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 13.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 13.4.4 -...

org.xwiki.rendering:xwiki-rendering-macro-html (8.0-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (8.0-milestone-1) +11 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (8.0-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 8.0-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 8.0-milestone-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (15.7-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (15.7-rc-1) +15 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (15.7-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 15.7-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 15.7-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.3-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (11.3-rc-1) +8 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (11.3-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.3-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.3-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (10.5-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (10.5-rc-1) +8 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (10.5-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 10.5-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.5-rc-1 -...

EUVD-2014-8819

Malware in sbrugna...

EUVD-2011-1131

Malware in sbrugna...

EUVD-2021-1654

Malware in sbrugna...

EUVD-2016-9928

Malware in sbrugna...

EUVD-2014-2281

Malware in sbrugna...

EUVD-2022-39943

Malicious code in bioql PyPI...

CVE-2024-13980

H3C Intelligent Management Center IMC versions up to and including E0632H07 contains a remote command execution vulnerability in the /byod/index.xhtml endpoint. Improper handling of JSF ViewState allows unauthenticated attackers to craft POST requests with forged javax.faces.ViewState parameters,...

CVE-2024-13980

H3C Intelligent Management Center (IMC) versions up to and including E0632H07 are vulnerable to a remote command execution (RCE) flaw in the /byod/index.xhtml endpoint. The root cause is the improper handling of JSF ViewState , which allows unauthenticated attackers to craft POST requests with fo...

CVE-2024-13980 H3C Intelligent Management Center (iMC) /byod/index.xhtml RCE

H3C Intelligent Management Center IMC versions up to and including E0632H07 contains a remote command execution vulnerability in the /byod/index.xhtml endpoint. Improper handling of JSF ViewState allows unauthenticated attackers to craft POST requests with forged javax.faces.ViewState parameters,...

Linux Distros Unpatched Vulnerability : CVE-2017-12980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc/parser/xhtml.php. An attacker can create or edit a wiki that us...

org.xwiki.rendering:xwiki-rendering-macro-html (>=5.4.5, <=14.9), org.xwiki.rendering:xwiki-rendering-standalone (>=5.4.5, <=14.9) +8 more potentially affected by CVE-2025-53835 via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (>=5.4.5, <=14.9)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version =5.4.5, =5.4.5, =5.4.5, =6.4-milestone-3, =5.4.5, =5.4.5, =5.4.5, =6.4-milestone-3, =5.4.5, =5.4.5, =14.1-rc-1, =14.9 Source cves: CVE-2025-53835 Source advisory: SNYK:JAVA-ORGXWIKIRENDERING-10847875...

CVE-2025-53835 XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Starting in version 5.4.5 and prior to version 14.10, the XHTML syntax depended on the xdom+xml/current syntax which allows the creation of raw blocks...

CVE-2025-53835

XWiki Rendering (org.xwiki.rendering) is affected in versions 5.4.5 up to, but not including, 14.10 due to a dependency of the XHTML syntax on xdom+xml/current, which permits creation of raw blocks that can insert arbitrary HTML/JavaScript and enable XSS when users can edit content (e.g., profile...