EUVD-2017-18313

Malware in sbrugna...

EUVD-2020-10391

Malware in sbrugna...

EUVD-2013-4724

Malware in sbrugna...

EUVD-2017-18363

Malware in sbrugna...

EUVD-2017-18299

Malware in sbrugna...

EUVD-2017-18362

Malware in sbrugna...

EUVD-2018-1916

Malware in sbrugna...

EUVD-2017-16856

Malware in sbrugna...

EUVD-2017-15970

Malware in sbrugna...

EUVD-2018-8814

Malware in sbrugna...

EUVD-2013-5153

Malware in sbrugna...

EUVD-2022-38916

Malicious code in bioql PyPI...

EUVD-2023-49277

Malicious code in bioql PyPI...

CVE-2020-26669

A stored cross-site scripting XSS vulnerability was discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to execute arbitrary web scripts or HTML via the page content to site/index.php/admin/pages/update...

CVE-2020-26668

A SQL injection vulnerability was discovered in /core/feeds/custom.php in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to inject a malicious SQL query to the applications via the 'Create New Feed' function...

CVE-2020-26670

A vulnerability has been discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to execute arbitrary commands through a crafted request sent to the server via the 'Create a New Setting' function...

CVE-2020-18467

Cross Site Scripting XSS vulnerabilty exists in BigTree-CMS 4.4.3 in the tag name field found in the Tags page under the General menu via a crafted website name by doing an authenticated POST HTTP request to admin/tags/create...

CVE-2013-5313

Cross-site request forgery CSRF vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action...

CVE-2017-9378

BigTree CMS through 4.2.18 does not prevent a user from deleting their own account. This could have security relevance because deletion was supposed to be an admin-only action, and the admin may have other tasks such as data backups to complete before a user is deleted...

CVE-2017-9441

Multiple cross-site scripting XSS vulnerabilities in BigTree CMS through 4.2.18 allow remote authenticated users to inject arbitrary web script or HTML by uploading a crafted package, triggering mishandling of the 1 title or 2 version or 3 authorname parameter in manifest.json. This issue exists ...