248 matches found
CVE-2025-15240: Unrestricted Upload of File with Dangerous Type
QOCA aim AI Medical Cloud Platform developed by Quanta Computer has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
CVE-2025-15237: Absolute Path Traversal
QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticated remote attackers to read folder names under the specified path by exploiting an Absolute Path Traversal vulnerability...
CVE-2025-15239: Improper Neutralization of Special Elements used in an SQL Command
QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...
CVE-2025-15235: Missing Authorization
QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Missing Authorization vulnerability, allowing authenticated remote attackers to modify specific network packet parameters, enabling certain system functions to access other users' files...
CVE-2025-14255: Improper Neutralization of Special Elements used in an SQL Command
Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...
CVE-2025-13771: Relative Path Traversal
WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...
CVE-2025-12872: Improper Neutralization of Input During Web Page Generation
The a+HRD and a+HCM developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to upload files containing malicious JavaScript code, which will execute on the client side when a user is tricked into visiting a specific URL...
CVE-2025-12864
CVE-2025-12864 affects U-Office Force by e-Excellence and describes an SQL Injection vulnerability exploitable by an authenticated remote attacker to read, modify, and delete database contents. Root cause: improper handling of SQL commands in the vulnerable component. Impact metrics indicate high...
CVE-2025-20303: Improper Neutralization of Input During Web Page Generation
Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...
CVE-2025-20289: Improper Neutralization of Input During Web Page Generation
Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...
EUVD-2019-10264
Malware in sbrugna...
EUVD-2018-11797
Malware in sbrugna...
EUVD-2020-13024
Malware in sbrugna...
EUVD-2020-24648
Malware in sbrugna...
EUVD-2018-11795
Malware in sbrugna...
EUVD-2024-18067
Malicious code in bioql PyPI...
EUVD-2024-54492
Malicious code in bioql PyPI...
EUVD-2021-6650
Malicious code in bioql PyPI...