EUVD-2021-1383

Malware in sbrugna...

EUVD-2013-1960

Malware in sbrugna...

EUVD-2017-17048

Malware in sbrugna...

EUVD-2022-2234

Malicious code in bioql PyPI...

EUVD-2022-2311

Malicious code in bioql PyPI...

EUVD-2022-2296

Malicious code in bioql PyPI...

EUVD-2025-21028

Malicious code in bioql PyPI...

EUVD-2025-24540

Malicious code in bioql PyPI...

EUVD-2022-0949

Malicious code in bioql PyPI...

EUVD-2025-21425

Malicious code in bioql PyPI...

EUVD-2023-1903

Malicious code in bioql PyPI...

EUVD-2022-4329

Malicious code in bioql PyPI...

EUVD-2022-15548

Malicious code in bioql PyPI...

EUVD-2021-31483

Malicious code in bioql PyPI...

Mautic vulnerable to secret data extraction via elfinder

Summary A user with administrator rights can change the configuration of the mautic application and extract secrets that are not normally available. Impact An administrator who usually does not have access to certain parameters, such as database credentials, can disclose them...

Unverified Ownership

Overview Affected versions of this package are vulnerable to Unverified Ownership via the elfinder process. An attacker can access sensitive information by modifying application configuration to extract secrets that are not typically available to them. Remediation Upgrade mautic/core-lib to versi...

CVE-2025-0818

Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various versions. This makes it possible for unauthenticated attackers to delete arbitrary files. Successful exploitation of this vulnerability requires a site owner to explicitly make an...

Directory Traversal

Overview studio-42/elfinder is an open-source file manager for web, written in JavaScript using jQuery UI. Affected versions of this package are vulnerable to Directory Traversal via the onShutdown function in the elFinder.class.php file. An attacker can delete arbitrary files by sending crafted...

CVE-2025-0818

Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various versions. This makes it possible for unauthenticated attackers to delete arbitrary files. Successful exploitation of this vulnerability requires a site owner to explicitly make an...

CVE-2025-0818

Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various versions. This makes it possible for unauthenticated attackers to delete arbitrary files. Successful exploitation of this vulnerability requires a site owner to explicitly make an...