219 matches found
CVE-2023-37525: Exposure of Sensitive System Information to an Unauthorized Control Sphere
A sensitive information disclosure in HCL BigFix Compliance allows a remote attacker to access files under the WEB-INF directory, which may contain Java class files and configuration information, leading to unauthorized access to application internals...
CVE-2025-70974
Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java class, there may be calls to certain public methods of that class. Depending on the behavior of those methods, there may be JNDI injection with an...
EUVD-2021-10361
Malware in sbrugna...
EUVD-2005-1025
Malware in sbrugna...
EUVD-2019-0613
Malware in sbrugna...
EUVD-2014-8730
Malware in sbrugna...
EUVD-2014-0762
Malware in sbrugna...
EUVD-2002-1835
Malware in sbrugna...
EUVD-2002-1969
Malware in sbrugna...
EUVD-2013-0663
Malware in sbrugna...
EUVD-2022-29297
Malicious code in bioql PyPI...
EUVD-2022-41312
Malicious code in bioql PyPI...
EUVD-2023-42953
Malicious code in bioql PyPI...
EUVD-2022-3350
Malicious code in bioql PyPI...
EUVD-2024-41567
Malicious code in bioql PyPI...
CVE-2025-26074
Orkes Conductor v3.21.11 allows remote attackers to execute arbitrary OS commands through unrestricted access to Java classes...
CVE-2025-26074
Orkes Conductor v3.21.11 allows remote attackers to execute arbitrary OS commands through unrestricted access to Java classes...
CVE-2025-5878
A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...
