676 matches found
CVE-2025-15237: Absolute Path Traversal
QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticated remote attackers to read folder names under the specified path by exploiting an Absolute Path Traversal vulnerability...
CVE-2025-15235: Missing Authorization
QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Missing Authorization vulnerability, allowing authenticated remote attackers to modify specific network packet parameters, enabling certain system functions to access other users' files...
PT-2026-1221
Name of the Vulnerable Software and Affected Versions QOCA aim AI Medical Cloud Platform affected versions not specified Description A Missing Authorization issue exists in QOCA aim AI Medical Cloud Platform. Authenticated remote attackers can modify network packet parameters, potentially allowin...
CVE-2018-25135
Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers to execute commands by inserting malicious formulas in user import fields. Attackers can craft payloads in fields like 'Name', 'Gender', or 'Position' to trigger Excel macro execution when importing...
CVE-2018-25135
CVE-2018-25135 affects Anviz AIM CrossChex Standard 4.3.6.0. The CSV injection vulnerability arises from user import fields (e.g., Name, Gender, Position) that can contain malicious formulas, triggering Excel macro execution when importing user data. Reported impact includes command execution in ...
CVE-2018-25135: Improper Neutralization of Quoting Syntax
Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers to execute commands by inserting malicious formulas in user import fields. Attackers can craft payloads in fields like 'Name', 'Gender', or 'Position' to trigger Excel macro execution when importing...
Malicious code in saku-aim-upuasoanmio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cddf020e13cd5d173a1086c6d76cc269e01e0012b14c62daa1d28ebc9c62e005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2004-0279
Malware in sbrugna...
EUVD-2004-0504
Malware in sbrugna...
EUVD-2005-1460
Malware in sbrugna...
EUVD-2011-4525
Malware in sbrugna...
EUVD-2005-2103
Malware in sbrugna...
EUVD-2005-0473
Malware in sbrugna...
EUVD-2006-0550
Malware in sbrugna...
EUVD-2007-6663
Malware in sbrugna...
EUVD-2024-54479
Malicious code in bioql PyPI...
EUVD-2025-22328
Malicious code in bioql PyPI...
EUVD-2024-41597
Malicious code in bioql PyPI...