EUVD-2016-9733

Malware in sbrugna...

EUVD-2012-1836

Malware in sbrugna...

EUVD-2017-14950

Malware in sbrugna...

EUVD-2016-9732

Malware in sbrugna...

EUVD-2020-20344

Malware in sbrugna...

EUVD-2020-22952

Malware in sbrugna...

EUVD-2017-15071

Malware in sbrugna...

EUVD-2022-38613

Malicious code in bioql PyPI...

EUVD-2023-43734

Malicious code in bioql PyPI...

EUVD-2024-31762

Malicious code in bioql PyPI...

EUVD-2022-39688

Malicious code in bioql PyPI...

EUVD-2022-48640

Malicious code in bioql PyPI...

EUVD-2025-27276

Malicious code in bioql PyPI...

EUVD-2022-39687

Malicious code in bioql PyPI...

dotCMS 25.07.02-1 - Authenticated Blind SQL Injection

!/usr/bin/env python3 Exploit Title: dotCMS 25.07.02-1 - Authenticated Blind SQL Injection Google Dork: N/A Date: 2025-09-09 Exploit Author: Matan Sandori OSCP, OSEP, OSWE Vendor Homepage:https://www.dotcms.com/ Software Link: https://github.com/dotCMS/core/releases/tag/v25.07.02-1 tested on:...

CVE-2025-8311

dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the /api/v1/contenttype endpoint. This endpoint uses the sites query parameter, which accepts a comma-separated list of site identifiers or keys. The vulnerability was triggered via the sites parameter, whi...

CVE-2025-8311

dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the /api/v1/contenttype endpoint. This endpoint uses the sites query parameter, which accepts a comma-separated list of site identifiers or keys. The vulnerability was triggered via the sites parameter, whi...

CVE-2025-8311

dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the /api/v1/contenttype endpoint. This endpoint uses the sites query parameter, which accepts a comma-separated list of site identifiers or keys. The vulnerability was triggered via the sites parameter, whi...

CVE-2025-8311

CVE-2025-8311 affects dotCMS 24.03.22 and later, with a Boolean-based blind SQL injection in GET /api/v1/contenttype where the sites parameter is concatenated into SQL unsafely. An authenticated, low-privilege user could exfiltrate data, escalate privileges, or trigger DoS. Proof-of-concept and i...

CVE-2025-8311

dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the /api/v1/contenttype endpoint. This endpoint uses the sites query parameter, which accepts a comma-separated list of site identifiers or keys. The vulnerability was triggered via the sites parameter, whi...