📄 4D Server Server-Side Request Forgery / Arbitrary File Read

Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP endpoints in 4D server. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services. -----BEGIN PGP SIGNED...

EUVD-2001-0953

Malware in sbrugna...

EUVD-2004-0696

Malware in sbrugna...

EUVD-2002-0124

Malware in sbrugna...

EUVD-2004-0695

Malware in sbrugna...

EUVD-2002-0573

Malware in sbrugna...

EUVD-2005-1510

Malware in sbrugna...

EUVD-2004-0697

Malware in sbrugna...

EUVD-2023-45057

Malicious code in bioql PyPI...

EUVD-2023-45061

Malicious code in bioql PyPI...

EUVD-2023-45056

Malicious code in bioql PyPI...

EUVD-2023-54617

Malicious code in bioql PyPI...

EUVD-2023-45062

Malicious code in bioql PyPI...

EUVD-2023-45053

Malicious code in bioql PyPI...

EUVD-2023-45055

Malicious code in bioql PyPI...

EUVD-2023-45059

Malicious code in bioql PyPI...

EUVD-2023-45054

Malicious code in bioql PyPI...

EUVD-2023-45060

Malicious code in bioql PyPI...

EUVD-2023-45058

Malicious code in bioql PyPI...

CVE-2024-25423

An issue in MAXON CINEMA 4D R2024.2.0 allows a local attacker to execute arbitrary code via a crafted c4dbase.xdl64 file...