EUVD-2019-5830

Malware in sbrugna...

EUVD-2018-20501

Malware in sbrugna...

EUVD-2019-7223

Malware in sbrugna...

EUVD-2019-4865

Malware in sbrugna...

EUVD-2020-7505

Malware in sbrugna...

EUVD-2015-5487

Malware in sbrugna...

EUVD-2012-5938

Malware in sbrugna...

EUVD-2020-9406

Malware in sbrugna...

EUVD-2018-7548

Malware in sbrugna...

EUVD-2015-2390

Malware in sbrugna...

EUVD-2024-33565

Malicious code in bioql PyPI...

EUVD-2022-2825

Malicious code in bioql PyPI...

EUVD-2023-58614

Malicious code in bioql PyPI...

EUVD-2022-5295

Malicious code in bioql PyPI...

EUVD-2023-12477

Malicious code in bioql PyPI...

Exploit for Cross-Site Request Forgery (CSRF) in Tychesoftwares Order_Delivery_Date_Pro_For_Woocommerce

This is a PoC exploit for CVE-2025-2907, an unauthenticated arbi...

CVE-2024-10862

The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is vulnerable to SQL Injection via the 'searchparams' parameter in all versions up to, and including, 8.7.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

CVE-2024-28143

The password change function at /cgi/admin.cgi does not require the current/old password, which makes the application vulnerable to account takeover. An attacker can use this to forcefully set a new password within the -rsetpass+-aaction+- parameter for a user without knowing the old password, e....

CVE-2024-55922

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...

CVE-2023-6373

The ArtPlacer Widget WordPress plugin before 2.20.7 does not sanitize and escape the "id" parameter before submitting the query, leading to a SQLI exploitable by editors and above. Note: Due to the lack of CSRF check, the issue could also be exploited via a CSRF against a logged editor or above...