EUVD-2019-7565

Malware in sbrugna...

EUVD-2018-20740

Malware in sbrugna...

EUVD-2019-4003

Malware in sbrugna...

EUVD-2019-4005

Malware in sbrugna...

EUVD-2019-4001

Malware in sbrugna...

EUVD-2019-4000

Malware in sbrugna...

EUVD-2019-4002

Malware in sbrugna...

EUVD-2021-1860

Malware in sbrugna...

EUVD-2018-16987

Malware in sbrugna...

EUVD-2020-12628

Malware in sbrugna...

EUVD-2012-1951

Malware in sbrugna...

EUVD-2021-0032

Malware in sbrugna...

EUVD-2006-6612

Malware in sbrugna...

EUVD-2024-49236

Malicious code in bioql PyPI...

EUVD-2023-42311

Malicious code in bioql PyPI...

CVE-2025-36857 Rapid7 Appspider Broken Access Control Vulnerability

Rapid7 Appspider Pro versions below 7.5.021, suffer from a broken access control vulnerability in the application's configuration file loading mechanism, whereby an attacker can place files in directories belonging to other users or projects. Affected versions allow standard users to add custom...

CVE-2025-36857: Incorrect Default Permissions

Rapid7 Appspider Pro versions below 7.5.021, suffer from a broken access control vulnerability in the application's configuration file loading mechanism, whereby an attacker can place files in directories belonging to other users or projects. Affected versions allow standard users to add custom...

CVE-2025-10854 Symlink Following in txtai leads to arbitrary file write when loading untrusted embedding indices

The txtai framework allows the loading of compressed tar files as embedding indices. While the validate function is intended to prevent path traversal vulnerabilities by ensuring safe filenames, it does not account for symbolic links within the tar file. An attacker is able to write a file anywhe...

Remote Code Execution (RCE)

picklescan is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling of untrusted pickle data in the function’s reduce flow, which allows an attacker to craft a malicious pickle that bypasses the victim’s Picklescan check and achieve arbitrary code execution when t...

The vulnerability of SonicWall SMA 100 series network intrusion prevention systems’ microprogramming software lies in their ability to download files of a malicious nature without limitation, allowing attackers to execute arbitrary codes.

The vulnerability of SonicWall SMA 100 network firewall microprogramming software is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...