261 matches found
EUVD-2017-4496
Malware in sbrugna...
EUVD-2010-2050
Malware in sbrugna...
EUVD-2017-10004
Malware in sbrugna...
EUVD-2023-53693
Malicious code in bioql PyPI...
EUVD-2023-32300
Malicious code in bioql PyPI...
EUVD-2023-53694
Malicious code in bioql PyPI...
EUVD-2025-24213
Malicious code in bioql PyPI...
EUVD-2022-5594
Malicious code in bioql PyPI...
CVE-2025-57318
creationtimestamp| type| source ---|---|--- 2025-09-25 05:23:42+00:00| seen| https://gist.github.com/Darkcrai86/dd2d95d37934e5b8a53d18e11401236a...
Lobe Chat Desktop vulnerable to Remote Code Execution via XSS in Chat Messages
Summary We identified a cross-site scripting XSS vulnerability when handling chat message in lobe-chat that can be escalated to remote code execution on the user’s machine. Any party capable of injecting content into chat messages, such as hosting a malicious page for prompt injection, operating ...
CVE-2025-42918
creationtimestamp| type| source ---|---|--- 2025-09-11 13:37:23+00:00| seen| https://vulnerability.circl.lu/bundle/43ff9e04-da8f-45fe-a06a-e8f9b84a2d14...
CVE-2025-43886
creationtimestamp| type| source ---|---|--- 2025-09-10 17:20:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyiqlwltpw2j...
Linux Distros Unpatched Vulnerability : CVE-2023-28636
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Starting in version 0.60 and prior to versions 9.5.13 and 10.0.7, a vulnerability allows an administrat...
CVE-2025-9771
creationtimestamp| type| source ---|---|--- 2025-09-01 12:57:41+00:00| seen| https://gist.github.com/Darkcrai86/0c6d3860c036f3e19a61b922456e2809 2025-09-01 13:29:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxrpj5hrqw2r...
We Are Still Unable to Secure LLMs from Malicious Inputs
Nice indirect prompt injection attack: Bargury's attack starts with a poisoned document, which is shared to a potential victim's Google Drive. Bargury says a victim could have also uploaded a compromised file to their own account. It looks like an official document on company meeting policies. Bu...
Linux Distros Unpatched Vulnerability : CVE-2024-22262
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications that use UriComponentsBuilder to parse an externally provided URL e.g. through a query parameter AND perform validation checks on the host of the...
CVE-2025-42941
SAP Fiori Launchpad is vulnerable to Reverse Tabnabbing vulnerability due to inadequate external navigation protections for its link elements. An attacker with administrative user privileges could exploit this by leveraging compromised or malicious pages. While administrative access is necessary...
CVE-2025-55166
The CVE-2025-55166 issue affects the PHP SVG sanitizer project svg-sanitizer. Before version 0.22.0, the cleanXlinkHrefs function only searches for lower-case attribute names, allowing bypass of the isHrefSafeValue check and enabling cross-site scripting or linking to external domains. A fix is a...
CVE-2025-42941
SAP Fiori Launchpad is vulnerable to Reverse Tabnabbing vulnerability due to inadequate external navigation protections for its link elements. An attacker with administrative user privileges could exploit this by leveraging compromised or malicious pages. While administrative access is necessary...
CVE-2025-42941 Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad)
SAP Fiori Launchpad is vulnerable to Reverse Tabnabbing vulnerability due to inadequate external navigation protections for its link elements. An attacker with administrative user privileges could exploit this by leveraging compromised or malicious pages. While administrative access is necessary...