336 matches found
CVE-2025-51741
An issue was discovered in Veal98 Echo Open-Source Community System 2.2 thru 2.3 allowing an unauthenticated attacker to cause the server to send email verification messages to arbitrary users via the /sendEmailCodeForResetPwd endpoint potentially causing a denial of service to the server or the...
CVE-2025-63562
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insufficient server-side authorization. Authenticated attackers can call several endpoints and perform create/update/delete actions on resources owned by arbitrary users by manipulating request parameters e.g.,...
EUVD-2025-36108
The IDonate WordPress plugin before 2.1.13 does not have authorisation and CSRF when deleting users via an action handler, allowing unauthenticated attackers to delete arbitrary users...
Flowring Agentflow 安全漏洞
Flowring Agentflow is an intelligent process automation RPA platform from Flowring China. A security vulnerability exists in Flowring Agentflow that stems from the use of hard-coded encryption keys, which could allow an unauthenticated remote attacker to generate authentication information using ...
EUVD-2002-0658
Malware in sbrugna...
EUVD-2005-4204
Malware in sbrugna...
EUVD-2012-0013
Malware in sbrugna...
EUVD-2020-9426
Malware in sbrugna...
EUVD-2008-6505
Malware in sbrugna...
EUVD-2007-6462
Malware in sbrugna...
EUVD-2013-6987
Malware in sbrugna...
EUVD-2005-4776
Malware in sbrugna...
EUVD-2006-6756
Malware in sbrugna...
EUVD-2020-20627
Malware in sbrugna...
EUVD-2021-32527
Malicious code in bioql PyPI...
EUVD-2025-11100
Malicious code in bioql PyPI...
EUVD-2025-30232
Malicious code in bioql PyPI...
EUVD-2025-11133
Malicious code in bioql PyPI...