CVE-2025-62524 PILOS Exposes PHP version

PILOS Platform for Interactive Live-Online Seminars is a frontend for BigBlueButton. PILOS before 4.8.0 exposes the PHP version via the X-Powered-By header, enabling attackers to fingerprint the server and assess potential exploits. This information disclosure vulnerability originates from PHP’s...

EUVD-2020-5760

Malware in sbrugna...

EUVD-2012-5991

Malware in sbrugna...

EUVD-2021-19343

Malware in sbrugna...

EUVD-2019-17187

Malware in sbrugna...

EUVD-2019-9074

Malware in sbrugna...

EUVD-2021-19345

Malware in sbrugna...

EUVD-2021-19344

Malware in sbrugna...

EUVD-2020-2691

Malware in sbrugna...

EUVD-2023-2087

Malicious code in bioql PyPI...

EUVD-2023-2702

Malicious code in bioql PyPI...

EUVD-2022-1463

Malicious code in bioql PyPI...

CVE-2025-58366

CVE-2025-58366 affects Onyxia (Onyxia-API) in versions 4.6.0–4.8.0. The vulnerability arises from leaking credentials of private Helm repositories via the unauthenticated public endpoint /public/catalogs, when catalogs配置 include username/password. The issue enables exposure of private repo creden...

CVE-2025-58366 Onyxia private helm repository credentials are leaked through unauthenticated API

Onyxia is a data science environment for kubernetes. In versions 4.6.0 through 4.8.0, Onyxia-API leaked the credentials of private helm repositories in the public unauthenticated /public/catalogs endpoint.vOnly instances using private helm repositories i.e setting username & password in the...

Onyxia 安全漏洞

Onyxia is an open source web application from InseeFrLab designed to be the glue between multiple open source backend technologies. A security vulnerability exists in Onyxia version 4.8.0 and earlier, which stems from a credential leak that could lead to the exposure of sensitive information...

PT-2025-36105

Name of the Vulnerable Software and Affected Versions: Hono versions 4.8.0 through 4.9.5 Description: Hono is a Web application framework that provides support for any JavaScript runtime. A flaw exists in the getPath utility function that could allow path confusion and potential bypass of...

Security Bulletin: Due to use of Connect2id Nimbus JOSE+JWT, IBM Watson Studio in Cloud Pak for Data is affected by denial of service

Summary Connect2id Nimbus JOSE+JWT is used by Watson Studio in Cloud Pak for Data. Vulnerability Details CVEID:CVE-2023-52428 DESCRIPTION: In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service resource consumption via a large JWE p2c header value aka iteration cou...

CVE-2025-57888

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NooTheme Jobmonster noo-jobmonster allows Retrieve Embedded Sensitive Data.This issue affects Jobmonster: from n/a through = 4.8.0...

CVE-2025-57887

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NooTheme Jobmonster noo-jobmonster allows Stored XSS.This issue affects Jobmonster: from n/a through = 4.8.0...

CVE-2025-57888

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NooTheme Jobmonster noo-jobmonster allows Retrieve Embedded Sensitive Data.This issue affects Jobmonster: from n/a through = 4.8.0...