903 matches found
PT-2025-44487
Name of the Vulnerable Software and Affected Versions Nagios Fusion versions prior to 4.2.0 Description Nagios Fusion versions prior to 4.2.0 have a reflected cross-site scripting XSS issue in the license key configuration process. This allows an attacker to execute scripts in a user's browser by...
CVE-2025-64149
CVE-2025-64149 involves the Jenkins Publish to Bitbucket Plugin (versions 0.4 and earlier) with a CSRF vulnerability via an HTTP endpoint. An attacker with Overall/Read permission can initiate requests to an attacker-controlled URL using credentials IDs obtained through other means, potentially c...
CVE-2025-61417
CVE-2025-61417 is a Cross-Site Scripting (XSS) vulnerability in TastyIgniter 3.7.7, affecting the /admin/media_manager component. An attacker can upload a malicious SVG containing JavaScript; when an administrator previews the file, the code runs in the admin’s browser context, potentially allowi...
CVE-2025-61999
CVE-2025-61999 affects OPEXUS FOIAXpress before 11.13.3.0. An administrative user can upload an SVG image (logo) containing JavaScript or other content, causing stored XSS when other users view affected pages. This can enable the admin to perform actions on behalf of target users, including steal...
CVE-2025-61996 OPEXUS FOIAXpress stored XSS via annual report template
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content within the Annual Report Template. Injected content is executed in the context of other users when they generate an Annual Report. Successful exploitation allows the administrative user to perfo...
EUVD-2018-10022
Malware in sbrugna...
EUVD-2020-6378
Malware in sbrugna...
EUVD-2018-11832
Malware in sbrugna...
EUVD-2021-19718
Malware in sbrugna...
EUVD-2018-9656
Malware in sbrugna...
Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS Servers
Cybersecurity researchers have shed light on a Chinese-speaking cybercrime group codenamed UAT-8099 that has been attributed to search engine optimization SEO fraud and theft of high-value credentials, configuration files, and certificate data. The attacks are designed to target Microsoft Interne...
EUVD-2025-7086
Malicious code in bioql PyPI...
EUVD-2025-8840
Malicious code in bioql PyPI...
EUVD-2021-8277
Malicious code in bioql PyPI...
EUVD-2024-24397
Malicious code in bioql PyPI...
EUVD-2024-48781
Malicious code in bioql PyPI...
EUVD-2024-2827
Malicious code in bioql PyPI...
EUVD-2022-33624
Malicious code in bioql PyPI...