528 matches found
EUVD-2025-38359
The Course Booking System plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check in the csv-export.php file in all versions up to, and including, 6.1.5. This makes it possible for unauthenticated attackers to directly access the file and obtain an expo...
CVE-2025-12042
The Course Booking System plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check in the csv-export.php file in all versions up to, and including, 6.1.5. This makes it possible for unauthenticated attackers to directly access the file and obtain an expo...
CVE-2025-12042 Course Booking System <= 6.1.5 - Missing Authorization to Unauthenticated Booking Data Export
The Course Booking System plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check in the csv-export.php file in all versions up to, and including, 6.1.5. This makes it possible for unauthenticated attackers to directly access the file and obtain an expo...
CVE-2025-12042
The CVE-2025-12042 vulnerability affects the WordPress Course Booking System plugin, specifically due to a missing capability check in csv-export.php. This flaw allows unauthenticated access to export (download) all booking data for all versions up to and including 6.1.5. Public details consisten...
CVE-2025-62720: Exposure of Sensitive Information to an Unauthorized Actor
LinkAce is a self-hosted archive to collect website links. Versions 2.3.1 and below allow any authenticated user to export the entire database of links from all users in the system, including private links that should only be accessible to their owners. The HTML and CSV export functions in the...
cybersec-ids
cybersec-ids Full-stack AI-driven Web App Intrusion Detection...
CVE-2025-62417
Bagisto is an open source laravel eCommerce platform. When product data that begins with a spreadsheet formula character for example =, +, -, or @ is accepted and later exported or saved into a CSV and opened in spreadsheet software, the spreadsheet will interpret that cell as a formula. This...
CVE-2025-62417: Improper Neutralization of Formula Elements in a CSV File
Bagisto is an open source laravel eCommerce platform. When product data that begins with a spreadsheet formula character for example =, +, -, or @ is accepted and later exported or saved into a CSV and opened in spreadsheet software, the spreadsheet will interpret that cell as a formula. This...
EUVD-2017-15161
Malware in sbrugna...
EUVD-2018-12126
Malware in sbrugna...
EUVD-2018-6743
Malware in sbrugna...
EUVD-2020-23850
Malware in sbrugna...
EUVD-2020-7266
Malware in sbrugna...
EUVD-2021-13793
Malware in sbrugna...
EUVD-2021-2220
Malware in sbrugna...
EUVD-2014-2412
Malware in sbrugna...
EUVD-2015-7906
Malware in sbrugna...
EUVD-2025-5507
Malicious code in bioql PyPI...