PT-2025-45052

Name of the Vulnerable Software and Affected Versions Xibo versions 4.3.0 and below Description Xibo is a digital signage platform with a web content management system CMS. Versions 4.3.0 and below contain a Remote Code Execution issue in the CMS Developer menu’s Module Templating functionality...

EUVD-2006-1840

Malware in sbrugna...

EUVD-2009-4948

Malware in sbrugna...

EUVD-2006-1581

Malware in sbrugna...

EUVD-2016-9376

Malware in sbrugna...

EUVD-2020-23548

Malware in sbrugna...

EUVD-2021-0642

Malware in sbrugna...

EUVD-2020-3070

Malware in sbrugna...

EUVD-2024-47315

Malicious code in bioql PyPI...

EUVD-2023-39855

Malicious code in bioql PyPI...

EUVD-2025-25498

Malicious code in bioql PyPI...

EUVD-2023-27782

Malicious code in bioql PyPI...

EUVD-2025-25499

Malicious code in bioql PyPI...

Expression Language Injection

Overview Affected versions of this package are vulnerable to Expression Language Injection in the GatewayEvaluationContext method, which allows property modification that in turn enables code execution. Only Webflux applications are vulnerable, not WebMVC applications. Additionally, the following...

IBM Transformation Advisor 安全漏洞

IBM Transformation Advisor is an application modernization separation and migration assessment tool from International Business Machines IBM. A security vulnerability exists in IBM Transformation Advisor versions 2.0.1 through 4.3.1, which stems from an improper assignment of privileges and could...

Linux Distros Unpatched Vulnerability : CVE-2023-28447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Smarty is a template engine for PHP. In affected versions smarty did not properly escape javascript code. An attacker could exploit this vulnerability to execut...

CVE-2025-41451

Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command 'Command Injection' in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system...

CVE-2025-41452

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions...

CVE-2025-53213

Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ReachShip WooCommerce Multi-Carrier & Conditional Shipping elex-reachship-multi-carrier-conditional-shipping allows Using Malicious Files.This issue affects ReachShip WooCommerce Multi-Carrier & Conditional Shipping: fr...

CVE-2025-41452

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions...