PT-2026-4784

Forma LMS 2.3 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts into user profile first and last name fields. Attackers can craft scripts like 'alertdocument.cookie' to execute arbitrary JavaScript when the profile is viewed by other users...

EUVD-2019-14716

Malware in sbrugna...

EUVD-2014-5150

Malware in sbrugna...

EUVD-2019-14715

Malware in sbrugna...

EUVD-2019-14717

Malware in sbrugna...

EUVD-2019-14714

Malware in sbrugna...

EUVD-2022-31643

Malicious code in bioql PyPI...

EUVD-2022-45980

Malicious code in bioql PyPI...

EUVD-2022-44864

Malicious code in bioql PyPI...

EUVD-2022-45981

Malicious code in bioql PyPI...

EUVD-2022-45979

Malicious code in bioql PyPI...

EUVD-2022-44865

Malicious code in bioql PyPI...

EUVD-2022-44866

Malicious code in bioql PyPI...

MAL-2025-17438 Malicious code in como-espiar-whatsapp-de-forma-segura (npm)

The package como-espiar-whatsapp-de-forma-segura was found to contain malicious code...

Malicious code in como-espiar-whatsapp-de-forma-segura (npm)

The package como-espiar-whatsapp-de-forma-segura was found to contain malicious code...

CVE-2022-27104

An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3...

CVE-2019-5109

Exploitable SQL injection vulnerabilities exists in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...

CVE-2019-5110

Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...

CVE-2019-5112

Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filterstatus was confirmed to suffer from SQL injections and could be exploited by authenticated attackers. An attacker can send a web request with...

CVE-2019-5111

Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filtercat was confirmed to suffer from SQL injections and could be exploited by authenticated attackers. An attacker can send a web request with parameters...