874 matches found
CVE-2022-42967
Caret is vulnerable to an XSS attack when the user opens a crafted Markdown file when preview mode is enabled. This directly leads to client-side code execution...
PT-2026-3410
Summary Since 2017, the default webpack plugins have passed the entire process.env to EnvironmentPlugin. This pattern exposed ALL build environment variables to client-side JavaScript bundles whenever application code or any dependency referenced process.env.VARIABLE NAME. This is not a regressio...
AI Service Secret Disclosure
Most of the web applications rely on various public services to provide features to their users. In secure designs, consuming these private or cloud services will require authentication like API and private keys, username and password based credentials and similar sensitive data. Developers...
Third-Party Service Secret Disclosure
Most of the web applications rely on various public services to provide features to their users. In secure designs, consuming these private or cloud services will require authentication like API and private keys, username and password based credentials and similar sensitive data. Developers...
CVE-2025-11760 eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.5.6 - Unauthenticated Sensitive Information Exposure
The eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams plugin for WordPress is vulnerable to exposure of sensitive information in all versions up to, and including, 1.5.6. This is due to the plugin exposing Zoom SDK secret keys in client-side JavaScript within the meeting vie...
EUVD-2025-35900
The eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams plugin for WordPress is vulnerable to exposure of sensitive information in all versions up to, and including, 1.5.6. This is due to the plugin exposing Zoom SDK secret keys in client-side JavaScript within the meeting vie...
PT-2025-43694
Name of the Vulnerable Software and Affected Versions eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams versions through 1.5.6 Description The eRoom plugin for WordPress exposes Zoom SDK secret keys in client-side JavaScript within the meeting view template. This allows...
EUVD-2019-6604
Malware in sbrugna...
EUVD-2019-8009
Malware in sbrugna...
EUVD-2020-5523
Malware in sbrugna...
EUVD-2017-18325
Malware in sbrugna...
EUVD-2018-6559
Malware in sbrugna...
EUVD-2018-2681
Malware in sbrugna...
EUVD-2015-2000
Malware in sbrugna...
EUVD-2009-2316
Malware in sbrugna...
EUVD-2025-18995
Malicious code in bioql PyPI...
EUVD-2022-28256
Malicious code in bioql PyPI...
EUVD-2023-51441
Malicious code in bioql PyPI...
EUVD-2022-29559
Malicious code in bioql PyPI...
EUVD-2024-37369
Malicious code in bioql PyPI...