346 matches found
EUVD-2021-10851
Malware in sbrugna...
EUVD-2005-1108
Malware in sbrugna...
EUVD-2010-2263
Malware in sbrugna...
EUVD-2005-0587
Malware in sbrugna...
EUVD-2015-5867
Malware in sbrugna...
EUVD-2021-18917
Malware in sbrugna...
EUVD-2009-1304
Malware in sbrugna...
CVE-2025-43824
The CVE-2025-43824 affects the Profile widget in Liferay Portal 7.4.0–7.4.3.111 (and older unsupported versions) and Liferay DXP 2023.Q3–2023.Q4 and 7.4 GA up to update 92. The root cause is a user name being included in the Content-Disposition header, allowing remote authenticated users to chang...
CVE-2025-43824
The Profile widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the “Content-Disposition” header, which allows...
CVE-2025-43824: Improper Neutralization of Input During Web Page Generation
The Profile widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the “Content-Disposition” header, which allows...
PT-2025-40950
Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.4.0 through 7.4.3.111 Liferay DXP versions 2023.Q3.1 through 2023.Q3.8 Liferay DXP versions 2023.Q4.0 through 2023.Q4.5 Liferay Portal 7.4 GA through update 92 Description The Profile widget is susceptible to a...
EUVD-2025-25227
Malicious code in bioql PyPI...
EUVD-2022-7200
Malicious code in bioql PyPI...
EUVD-2022-0092
Malicious code in bioql PyPI...
EUVD-2025-25223
Malicious code in bioql PyPI...
EUVD-2023-1445
Malicious code in bioql PyPI...
EUVD-2025-21377
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2015-5921
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple iOS before 9 mishandles Content-Disposition: attachment HTTP headers, which might allow man-in-the-middle attackers to obtain sensitive...
The vulnerability of the Spring Framework lies in the lack of handling of CRLF sequences in HTTP headers (or “HTTP response splitting”). This allows attackers to carry out the RFD attack.
The vulnerability of the Spring Framework is related to the failure to handle CRLF sequences in HTTP headers or “HTTP response splitting”. Exploiting this vulnerability allows an attacker to perform a RFD attack by utilizing the “Content-Disposition” header...
Mozilla Firefox for iOS Cross-Site Scripting Vulnerability (CNVD-2025-19567)
Mozilla Firefox for iOS is a web browser designed for iOS devices by the US-based Mozilla Foundation. A cross-site scripting vulnerability exists in Mozilla Firefox for iOS prior to version 142, which stems from an improper handling of the Content-Disposition header and can be exploited by an...