CVE-2026-2932 YiFang CMS Extended Management D_adPosition.php update cross site scripting

A security flaw has been discovered in YiFang CMS up to 2.0.5. The impacted element is the function update of the file app/db/admin/DadPosition.php of the component Extended Management Module. Performing a manipulation of the argument name/index results in cross site scripting. The attack is...

EUVD-2018-15686

Malware in sbrugna...

EUVD-2018-15706

Malware in sbrugna...

EUVD-2018-15676

Malware in sbrugna...

EUVD-2018-15714

Malware in sbrugna...

EUVD-2018-15684

Malware in sbrugna...

EUVD-2019-5220

Malware in sbrugna...

EUVD-2018-15720

Malware in sbrugna...

EUVD-2018-15678

Malware in sbrugna...

EUVD-2018-15685

Malware in sbrugna...

EUVD-2018-15721

Malware in sbrugna...

EUVD-2018-15677

Malware in sbrugna...

EUVD-2018-15696

Malware in sbrugna...

EUVD-2025-12376

Malicious code in bioql PyPI...

EUVD-2025-12371

Malicious code in bioql PyPI...

CVE-2025-10944

A weakness has been identified in yi-ge get-header-ip up to 589b23d0eb0043c310a6a13ce4bbe2505d0d0b15. This issue affects the function ip of the file ip.php. This manipulation of the argument callback causes cross site scripting. The attack may be initiated remotely. This product uses a rolling...

CVE-2025-10944

The CVE-2025-10944 entry concerns yi-ge get-header-ip:ip.php, where the callback argument in the ip function can be manipulated to trigger cross-site scripting. Affected versions are those prior to 589b23d0eb0043c310a6a13ce4bbe2505d0d0b15. The weakness can be exploited remotely via network access...

CVE-2025-10944 yi-ge get-header-ip ip.php cross site scripting

A weakness has been identified in yi-ge get-header-ip up to 589b23d0eb0043c310a6a13ce4bbe2505d0d0b15. This issue affects the function ip of the file ip.php. This manipulation of the argument callback causes cross site scripting. The attack may be initiated remotely. This product uses a rolling...

Malicious code in riyu-tingyi-xuexi-erlingeryilingliu-erlingeryilingqi (npm)

The package riyu-tingyi-xuexi-erlingeryilingliu-erlingeryilingqi was found to contain malicious code...

CVE-2024-23727

The YI Smart Kami Vision com.kamivision.yismart application through 1.0.020231219 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component...