EUVD-2012-6562

Malware in sbrugna...

EUVD-2008-3304

Malware in sbrugna...

EUVD-2009-3676

Malware in sbrugna...

EUVD-2021-12811

Malware in sbrugna...

EUVD-2008-0398

Malware in sbrugna...

EUVD-2013-0746

Malware in sbrugna...

EUVD-2013-0747

Malware in sbrugna...

EUVD-2018-8420

Malware in sbrugna...

EUVD-2025-20883

Malicious code in bioql PyPI...

EUVD-2025-5499

Malicious code in bioql PyPI...

EUVD-2022-43506

Malicious code in bioql PyPI...

EUVD-2022-44799

Malicious code in bioql PyPI...

CVE-2025-4406

The wpForo Forum plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and abov...

Internet Brands vBulletin 安全漏洞

Internet Brands vBulletin is a forum plugin from Internet Brands, Inc. A security vulnerability exists in Internet Brands vBulletin that stems from a template condition that could be abused to execute arbitrary PHP code...

CVE-2024-12409

The Simple:Press Forum plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 6.10.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2023-2249

The wpForo Forum plugin for WordPress is vulnerable to Local File Include, Server-Side Request Forgery, and PHAR Deserialization in versions up to, and including, 2.1.7. This is due to the insecure use of filegetcontents without appropriate verification of the data being supplied to the function...

CVE-2022-41608

Cross-Site Request Forgery CSRF vulnerability in Thomas Belser Asgaros Forum plugin = 2.2.0 versions...

CVE-2021-25982

In Factor App Framework & Headless CMS forum plugin, versions 1.3.5 to 1.8.30, are vulnerable to reflected Cross-Site Scripting XSS at the “search” parameter in the URL. An unauthenticated attacker can execute malicious JavaScript code and steal the session cookies...

CVE-2021-25983

In Factor App Framework & Headless CMS forum plugin, versions v1.3.8 to v1.8.30, are vulnerable to reflected Cross-Site Scripting XSS at the “tags” and “category” parameters in the URL. An unauthenticated attacker can execute malicious JavaScript code and steal the session cookies...

CVE-2021-24406

The wpForo Forum WordPress plugin before 1.9.7 did not validate the redirectto parameter in the login form of the forum, leading to an open redirect issue after a successful login. Such issue could allow an attacker to induce a user to use a login URL redirecting to a website under their control...