EUVD-2020-20525

Malware in sbrugna...

EUVD-2021-20863

Malware in sbrugna...

EUVD-2021-15234

Malware in sbrugna...

EUVD-2007-1340

Malware in sbrugna...

EUVD-2007-0904

Malware in sbrugna...

EUVD-2005-3416

Malware in sbrugna...

EUVD-2005-0806

Malware in sbrugna...

EUVD-2021-26474

Malware in sbrugna...

EUVD-2008-5598

Malware in sbrugna...

EUVD-2005-4453

Malware in sbrugna...

EUVD-2023-30362

Malicious code in bioql PyPI...

EUVD-2022-34889

Malicious code in bioql PyPI...

EUVD-2021-29505

Malicious code in bioql PyPI...

EUVD-2024-22277

Malicious code in bioql PyPI...

CVE-2021-3124

Stored cross-site scripting XSS in form field in robust.systems product Custom Global Variables v 1.0.5 allows a remote attacker to inject arbitrary code via the vars0name field...

CVE-2021-34201

D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600DIR-2640. Local ordinary users can overwrite the global variables in the .bss section, causing the process crashes or changes...

CVE-2020-13909

The Ignition component before 2.0.5 for Laravel mishandles globals, get, post, cookie, and env. NOTE: in the 1.x series, versions 1.16.15 and later are unaffected as a consequence of the CVE-2021-43996 fix...

CVE-2025-46417

The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.getservercertificate can exfiltrate data via DNS after deserialization...

Class Pollution

Mesop is vulnerable to Class Pollution. The vulnerability is due to insecure handling of global variables and class attributes due to the ability of attackers to overwrite them at runtime, leading to potential denial of service, identity confusion, or remote code execution...

GHSA-F3MF-HM6V-JFHH Mesop Class Pollution vulnerability leads to DoS and Jailbreak attacks

From @jackfromeast and @superboy-zjc: We have identified a class pollution vulnerability in Mesop = 0.14.0 application that allows attackers to overwrite global variables and class attributes in certain Mesop modules during runtime. This vulnerability could directly lead to a denial of service Do...