PT-2025-44022

Name of the Vulnerable Software and Affected Versions VirtFusion versions through 6.0.2 Description A security issue exists in VirtFusion that relates to improper restriction of excessive authentication attempts. The issue is located within the Email Change Handler component, specifically affecti...

Exploit for Authorization Bypass Through User-Controlled Key in Themewinter Eventin

CVE-2025-4796 Eventin = 4.0.34 - Authenticated Contributo...

CVE-2025-62527

Taguette (open source qualitative research tool) before version 1.5.0 is affected by CVE-2025-62527, an issue where a password-reset flow could be exploited to deliver a malicious link that allows an attacker to set the user’s email when clicked by the victim. The root cause is tied to the passwo...

EUVD-2020-19338

Malware in sbrugna...

EUVD-2007-6205

Malware in sbrugna...

EUVD-2021-11804

Malware in sbrugna...

EUVD-2018-19353

Malware in sbrugna...

EUVD-2017-17856

Malware in sbrugna...

EUVD-2005-4682

Malware in sbrugna...

EUVD-2019-11416

Malware in sbrugna...

EUVD-2015-3259

Malware in sbrugna...

EUVD-2021-21857

Malware in sbrugna...

EUVD-2018-11269

Malware in sbrugna...

EUVD-2020-5500

Malware in sbrugna...

EUVD-2020-1416

Malware in sbrugna...

EUVD-2011-2946

Malware in sbrugna...

EUVD-2019-6684

Malware in sbrugna...

EUVD-2020-29038

Malware in sbrugna...

EUVD-2019-11412

Malware in sbrugna...

CVE-2025-9213

The TextBuilder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 1.0.0 to 1.1.1. This is due to missing or incorrect nonce validation on the 'handleToken' function. This makes it possible for unauthenticated attackers to update a user's authorization token via a forged...