155 matches found
CVE-2026-8134
Concrete CMS 9.5.0 and below fails to sanitize path traversal sequences in the ptComposerFormLayoutSetControlCustomTemplate field when saving page type composer form layouts. An authenticated rogue administrator with composer form editing rights can exploit this to include arbitrary readable file...
CVE-2026-8134
Concrete CMS 9.5.0 and earlier fails to sanitize path traversal in the ptComposerFormLayoutSetControlCustomTemplate field when saving page-type composer form layouts. An authenticated rogue administrator with composer form editing rights can cause arbitrary readable files to be included on the se...
CVE-2026-8134 Concrete CMS 9.5.0 and below is vulnerable to Authenticated RCE via Composer customTemplate Path Traversal leading to PHP File Inclusion
Concrete CMS 9.5.0 and below fails to sanitize path traversal sequences in the ptComposerFormLayoutSetControlCustomTemplate field when saving page type composer form layouts. An authenticated rogue administrator with composer form editing rights can exploit this to include arbitrary readable file...
PT-2026-26374
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. In versions 1.8.208 and below, bypasses of the attachment view logic and SVG sanitizer make it possible to upload and render an SVG that runs malicious JavaScript. An extension of .png with content type of...
EUVD-2021-15146
Malware in sbrugna...
EUVD-2021-21175
Malware in sbrugna...
EUVD-2020-9036
Malware in sbrugna...
EUVD-2020-18678
Malware in sbrugna...
EUVD-2020-9033
Malware in sbrugna...
EUVD-2020-9034
Malware in sbrugna...
EUVD-2020-9037
Malware in sbrugna...
EUVD-2020-9057
Malware in sbrugna...
EUVD-2022-29339
Malicious code in bioql PyPI...
EUVD-2022-40618
Malicious code in bioql PyPI...
EUVD-2023-31998
Malicious code in bioql PyPI...
EUVD-2022-47621
Malicious code in bioql PyPI...
EUVD-2022-28386
Malicious code in bioql PyPI...
EUVD-2022-28381
Malicious code in bioql PyPI...
EUVD-2023-31999
Malicious code in bioql PyPI...
Microsoft Raw Image Extension Multiple Vulnerabilities (May 2025) - Windows
Microsoft Raw Image Extension is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...