211 matches found
EUVD-2025-37543
Malicious code in dowloadebokteufelsbotschaftosterreichkrimimeierhoferssebylisagallauner07297 npm...
CVE-2025-8048
CVE-2025-8048 : OpenText Flipper 3.1.2 is affected by an External Control of File Name or Path vulnerability leading to a path traversal issue. The issue allows an attacker to submit a stored local file path and then download the specified file from the system by requesting the stored document ID...
CVE-2025-11692
The Zip Attachments plugin for WordPress is vulnerable to unauthorized loss of data due to a missing authorization and capability checks on the download.php file in all versions up to, and including, 1.6. This makes it possible for unauthenticated attackers to delete arbitrary files from the...
CVE-2025-11692
The Zip Attachments plugin for WordPress is vulnerable to unauthorized loss of data due to a missing authorization and capability checks on the download.php file in all versions up to, and including, 1.6. This makes it possible for unauthenticated attackers to delete arbitrary files from the...
EUVD-2025-33575
Newforma Info Exchange NIX uses a hard-coded key to encrypt certain query parameters. Some encrypted parameter values can specify paths to download files, potentially bypassing authentication and authorization, for example, the 'qs' parameter used in '/DownloadWeb/download.aspx'. This key is shar...
EUVD-2017-16796
Malware in sbrugna...
EUVD-2007-5044
Malware in sbrugna...
EUVD-2025-25956
Malicious code in bioql PyPI...
EUVD-2024-16260
Malicious code in bioql PyPI...
EUVD-2025-12096
Malicious code in bioql PyPI...
CVE-2025-30040
The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "/cgi-bin/CliniNET.prd/utils/userlogxls.pl" endpoint...
CVE-2025-9345
CVE-2025-9345 : Path Traversal to Arbitrary File Download in the WordPress plugin “File Manager, Code Editor, and Backup by Managefy.” Affected versions: all up to 1.4.8. Root cause per sources: authenticated users (Subscriber level and higher) can leverage ajax_downloadfile() to access files out...
Malicious code in mp3-do-wnload-file-to-day-13796-flick-the-vs-isfeh-rasowi (npm)
The package mp3-do-wnload-file-to-day-13796-flick-the-vs-isfeh-rasowi was found to contain malicious code...
Malicious code in mp3-do-wnload-file-to-day-204935-superstar-b7g5b-dxywxb (npm)
The package mp3-do-wnload-file-to-day-204935-superstar-b7g5b-dxywxb was found to contain malicious code...
MAL-2025-13906 Malicious code in a-lbum-do-wnload-avai-lable-file-2013-32830-consumer-complaints-m7j8s-pdrsca (npm)
The package a-lbum-do-wnload-avai-lable-file-2013-32830-consumer-complaints-m7j8s-pdrsca was found to contain malicious code...
MAL-2025-26795 Malicious code in mp3-do-wnload-file-to-day-56558-hooray-for-tuesday-1cdzh-nforeu (npm)
The package mp3-do-wnload-file-to-day-56558-hooray-for-tuesday-1cdzh-nforeu was found to contain malicious code...
MAL-2025-13907 Malicious code in a-lbum-do-wnload-avai-lable-file-2015-35030-woman-oeh1w-xjgwws (npm)
The package a-lbum-do-wnload-avai-lable-file-2015-35030-woman-oeh1w-xjgwws was found to contain malicious code...
MAL-2025-26796 Malicious code in mp3-do-wnload-file-to-day-60280-lay-down-and-love-it-live-yfkc2-lppmhd (npm)
The package mp3-do-wnload-file-to-day-60280-lay-down-and-love-it-live-yfkc2-lppmhd was found to contain malicious code...
Malicious code in mp3-do-wnload-file-to-day-179158-if-youre-going-to-the-city-a-tribute-to-mose-allison-5ahsk-gfbljg (npm)
The package mp3-do-wnload-file-to-day-179158-if-youre-going-to-the-city-a-tribute-to-mose-allison-5ahsk-gfbljg was found to contain malicious code...