640 matches found
CVE-2025-34282
ThingsBoard versions 4.2.1 contain a server-side request forgery SSRF vulnerability in the dashboard's Image Upload Gallery feature. An attacker can upload a malicious SVG file that references a remote URL. If the server processes the SVG file in a way that parses external references, it may...
CVE-2025-34281
ThingsBoard vulnerability CVE-2025-34281 affects pre-4.2.1 releases. An authenticated user can upload malicious SVGs via the Image Gallery, enabling Stored XSS when the image is loaded by a browser (e.g., through public API access or iframe embedding during widget creation/deployment on dashboard...
PT-2025-42641
Name of the Vulnerable Software and Affected Versions ThingsBoard versions prior to 4.2.1 Description The software contains a stored cross-site scripting XSS issue within the dashboard's Image Upload Gallery feature. An attacker can upload a Scalable Vector Graphics SVG file containing malicious...
EUVD-2014-8921
Malware in sbrugna...
EUVD-2007-0604
Malware in sbrugna...
EUVD-2020-13678
Malware in sbrugna...
EUVD-2017-9971
Malware in sbrugna...
EUVD-2011-3703
Malware in sbrugna...
EUVD-2010-4832
Malware in sbrugna...
EUVD-2019-7643
Malware in sbrugna...
EUVD-2008-0460
Malware in sbrugna...
EUVD-2020-18465
Malware in sbrugna...
EUVD-2021-24567
Malware in sbrugna...
EUVD-2021-24564
Malware in sbrugna...
EUVD-2019-6477
Malware in sbrugna...
EUVD-2016-2296
Malware in sbrugna...
EUVD-2021-24566
Malware in sbrugna...
EUVD-2023-12155
Malicious code in bioql PyPI...