PT-2025-42203

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 12.9 and earlier Description A DOM-based Cross-Site Scripting XSS issue exists in Adobe Connect. A high-privileged attacker could exploit this to execute malicious scripts in a victim’s browser. Exploitation requires a...

EUVD-2021-16856

Malware in sbrugna...

EUVD-2020-0324

Malware in sbrugna...

EUVD-2020-26486

Malware in sbrugna...

EUVD-2017-12607

Malware in sbrugna...

EUVD-2018-14330

Malware in sbrugna...

Security Bulletin: IBM Transformation Extender Advanced is affected by unsafe Java deserialization.

Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine, is affected by unsafe Java deserialization. Vulnerability Details CVEID:CVE-2023-49886 DESCRIPTION: IBM Standards Processing Engine could allow a remote attacker to execute arbitrary code on the system,...

EUVD-2025-5535

Malicious code in bioql PyPI...

EUVD-2024-36604

Malicious code in bioql PyPI...

EUVD-2019-12543

Malicious code in bioql PyPI...

EUVD-2023-29723

Malicious code in bioql PyPI...

EUVD-2022-44481

Malicious code in bioql PyPI...

EUVD-2025-14348

Malicious code in bioql PyPI...

EUVD-2024-38821

Malicious code in bioql PyPI...

EUVD-2025-27196

Malicious code in bioql PyPI...

EUVD-2025-17604

Malicious code in bioql PyPI...

Adobe Commerce B2B Improper Input Validation (APSB25-88)

The version of Adobe Commerce B2B installed on the remote host it is, therefore, affected by a vulnerability as referenced in the APSB25-88 advisory. - Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validatio...

CVE-2025-42944

Due to a deserialization vulnerability in SAP NetWeaver, an unauthenticated attacker could exploit the system through the RMI-P4 module by submitting malicious payload to an open port. The deserialization of such untrusted Java objects could lead to arbitrary OS command execution, posing a high...

GHSA-F7QQ-56WW-84CR Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports

Summary The vulnerability allows malicious actors to bypass PickleScan's unsafe globals check, leading to potential arbitrary code execution. The issue stems from PickleScan's strict check for full module names against its list of unsafe globals. By using subclasses of dangerous imports instead o...

Magento Community Edition Improper Input Validation vulnerability

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A successful attacker can abuse this to achieve session takeover, increasing the...