EUVD-2021-21699

Malware in sbrugna...

EUVD-2020-23233

Malware in sbrugna...

EUVD-2020-0242

Malware in sbrugna...

EUVD-2021-10427

Malware in sbrugna...

EUVD-2025-18134

Malicious code in bioql PyPI...

EUVD-2024-2805

Malicious code in bioql PyPI...

EUVD-2025-6899

Malicious code in bioql PyPI...

EUVD-2024-3113

Malicious code in bioql PyPI...

EUVD-2025-16716

Malicious code in bioql PyPI...

EUVD-2022-1404

Malicious code in bioql PyPI...

EUVD-2025-31327

Malicious code in bioql PyPI...

CVE-2025-10858 Allocation of Resources Without Limits or Throttling in GitLab

An issue was discovered in GitLab CE/EE affecting all versions before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that allows unauthenticated users to cause a Denial of Service DoS condition while uploading specifically crafted large JSON files...

CVE-2025-10858 Allocation of Resources Without Limits or Throttling in GitLab

An issue was discovered in GitLab CE/EE affecting all versions before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that allows unauthenticated users to cause a Denial of Service DoS condition while uploading specifically crafted large JSON files...

CVE-2025-41428

Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker...

CVE-2025-41428

Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker...

CVE-2025-41428

Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker...

CVE-2025-41428

Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker...

TimeWorks vulnerable to path traversal

Overview The web server module of TimeWorks provided by Keiyo System Co., LTD contains the following vulnerability. Path traversal CWE-22 - CVE-2025-41428 Masamu Asato of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Informatio...

CVE-2024-47170

Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to read arbitrary JSON files at attacker-chosen locations on the server. This issue can lead to unauthorized access to sensitive information an...

CVE-2024-12637

The Moving Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.05 via the export functionality. The JSON files are stored in predictable locations with guessable file names when exporting user data. This could allow unauthenticated...