EUVD-2018-19398

Malware in sbrugna...

EUVD-2020-7841

Malware in sbrugna...

EUVD-2020-14768

Malware in sbrugna...

EUVD-2020-18710

Malware in sbrugna...

EUVD-2015-7293

Malware in sbrugna...

EUVD-2006-6970

Malware in sbrugna...

EUVD-2006-0428

Malware in sbrugna...

EUVD-2009-0776

Malware in sbrugna...

EUVD-2017-17358

Malware in sbrugna...

EUVD-2005-2267

Malware in sbrugna...

EUVD-2021-7605

Malicious code in bioql PyPI...

Cross-site Scripting (XSS)

Overview @meshconnect/web-link-sdk is an A client-side JS library for integrating with Mesh Connect Affected versions of this package are vulnerable to Cross-site Scripting XSS via the createLink.openLink function. An attacker can execute arbitrary JavaScript code in the context of the parent pag...

UBUNTU-CVE-2025-58145

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL...

IBM Concert Software Cross Domain Resource Sharing Vulnerability

IBM Concert Software is IBM's generative AI-driven automated application management and monitoring tool based on the WatsonX platform, focused on optimizing the operational efficiency and reliability of applications. IBM Concert Software suffers from a cross-domain resource sharing vulnerability...

IBM Concert Software 安全漏洞

IBM Concert Software is IBM's generative AI-driven automated application management and monitoring tool based on the WatsonX platform, focused on optimizing the operational efficiency and reliability of applications. IBM Concert Software suffers from a cross-domain resource sharing vulnerability...

CVE-2025-20302

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain. This vulnerability is due to missing authorization checks. An attacker could exploit this...

Malicious code in express-domain-access (npm)

The package express-domain-access was found to contain malicious code...

MAL-2025-20071 Malicious code in express-domain-access (npm)

The package express-domain-access was found to contain malicious code...

CVE-2025-20302

CVE-2025-20302 : Cisco Secure FMC Software’s web-based management interface contains a missing authorization check that could let an authenticated, low-privileged, remote attacker retrieve a generated report from a different domain managed on the same FMC instance. The attacker could directly acc...

PT-2025-33337 · Cisco · Cisco Secure Fmc

Name of the Vulnerable Software and Affected Versions: Cisco Secure FMC Software affected versions not specified Description: A vulnerability exists in the web-based management interface of Cisco Secure FMC Software that could allow an authenticated, low-privileged, remote attacker to access...