CVE-2026-40425 MacGregor Voyage Data Recorder (VDR) G4e Files or Directories Accessible to External Parties

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password...

PT-2026-41461

Name of the Vulnerable Software and Affected Versions WP Learn Manager version 1.1.2 Description A stored cross-site scripting issue allows unauthenticated attackers to inject malicious scripts. This is achieved by submitting POST requests to the 'jslm fieldordering' page using the fieldtitle...

EUVD-2020-31227

Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send POST requests to the administrator index with malicious 'sortby' values to extract...

GO-2026-4537 Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2...

CVE-2026-27516 Binardat 10G08-0800GSM Network Switch Plaintext Password Exposure

Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior expose user passwords in plaintext within the administrative interface and HTTP responses, allowing recovery of valid credentials...

CVE-2026-27505

SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user registration workflow index.php submitting to admin/useraction.php. User-supplied fields such as Firstname, lastname, and email are stored in the backend database without adequate output encoding and a...

PT-2026-21274

SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user registration workflow index.php submitting to admin/user action.php. User-supplied fields such as Firstname, lastname, and email are stored in the backend database without adequate output encoding and...

PT-2026-21275

SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow user settings.php submitting to admin/update user.php. Authenticated users can store malicious HTML/JavaScript in fields such as Firstname, lastname, email, and image url, which...

MiracleLinux 3 : mailman-2.1.11-3.3AXS3 (AXBA:2009-202:01)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXBA:2009-202:01 advisory. - Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified...

EUVD-2007-1226

Malware in sbrugna...

EUVD-2009-2841

Malware in sbrugna...

EUVD-2011-4855

Malware in sbrugna...

EUVD-2021-10822

Malware in sbrugna...

EUVD-2006-0950

Malware in sbrugna...

EUVD-2008-0574

Malware in sbrugna...

EUVD-2018-7991

Malware in sbrugna...

EUVD-2022-40725

Malicious code in bioql PyPI...

EUVD-2024-33224

Malicious code in bioql PyPI...

EUVD-2024-33222

Malicious code in bioql PyPI...

EUVD-2021-33938

Malicious code in bioql PyPI...