567 matches found
CVE-2025-63551
A Server-Side Request Forgery SSRF vulnerability, achievable through an XML External Entity XXE injection, exists in MetInfo Content Management System CMS thru 8.1. This flaw stems from a defect in the XML parsing logic, which allows an attacker to construct a malicious XML entity that forces the...
EUVD-2020-0607
Malware in sbrugna...
EUVD-2018-9995
Malware in sbrugna...
EUVD-2021-1993
Malware in sbrugna...
EUVD-2021-0581
Malware in sbrugna...
EUVD-2018-4383
Malware in sbrugna...
EUVD-2020-3025
Malware in sbrugna...
EUVD-2017-7993
Malware in sbrugna...
EUVD-2020-3402
Malware in sbrugna...
EUVD-2025-32450
A security flaw has been discovered in CRMEB up to 5.6. This issue affects some unknown processing of the file /adminapi/product/product of the component GET Parameter Handler. Performing manipulation of the argument cateid results in sql injection. Remote exploitation of the attack is possible...
CVE-2025-11288 CRMEB GET Parameter product sql injection
A security flaw has been discovered in CRMEB up to 5.6. This issue affects some unknown processing of the file /adminapi/product/product of the component GET Parameter Handler. Performing a manipulation of the argument cateid results in sql injection. Remote exploitation of the attack is possible...
EUVD-2022-6691
Malicious code in bioql PyPI...
EUVD-2024-29115
Malicious code in bioql PyPI...
EUVD-2023-0135
Malicious code in bioql PyPI...
EUVD-2025-11882
Malicious code in bioql PyPI...
EUVD-2022-34216
Malicious code in bioql PyPI...
CVE-2025-10433: Deserialization of Untrusted Data
A vulnerability was determined in 1Panel-dev MaxKB up to 2.0.2/2.1.0. This issue affects some unknown processing of the file /admin/api/workspace/default/tool/debug. Executing manipulation of the argument code can lead to deserialization. The attack can be executed remotely. The exploit has been...
CVE-2025-9591 ZrLog Theme Configuration Form config cross site scripting
A security vulnerability has been detected in ZrLog up to 3.1.5. This vulnerability affects unknown code of the file /api/admin/template/config of the component Theme Configuration Form. Such manipulation of the argument footerLink leads to cross site scripting. The attack may be launched remotel...
CVE-2025-50904
There is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 2025-06-11. An attacker can exploit this vulnerability to access /admin/ API without any token...
CVE-2025-50904: Authentication Bypass Using an Alternate Path or Channel
There is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 2025-06-11. An attacker can exploit this vulnerability to access /admin/ API without any token...