EUVD-2021-27114

Malware in sbrugna...

EUVD-2007-1431

Malware in sbrugna...

EUVD-2021-26979

Malware in sbrugna...

EUVD-2007-1534

Malware in sbrugna...

EUVD-2007-1326

Malware in sbrugna...

EUVD-2021-26978

Malware in sbrugna...

EUVD-2018-20840

Malware in sbrugna...

EUVD-2007-1430

Malware in sbrugna...

EUVD-2007-0664

Malware in sbrugna...

EUVD-2006-5574

Malware in sbrugna...

EUVD-2007-5350

Malware in sbrugna...

EUVD-2006-5856

Malware in sbrugna...

EUVD-2007-3891

Malware in sbrugna...

EUVD-2024-21274

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2008-4078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQL injection vulnerability in the AR/AP transaction report in 1 LedgerSMB LSMB before 1.2.15 and 2 SQL-Ledger 2.8.17 and earlier allows remote authenticated...

Linux Distros Unpatched Vulnerability : CVE-2007-5372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple SQL injection vulnerabilities in a LedgerSMB 1.0.0 through 1.2.7 and b DWS Systems SQL-Ledger 2.x allow remote attackers to execute arbitrary SQL...

Ubuntu: Security Advisory (USN-7647-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : LedgerSMB vulnerabilities (USN-7647-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7647-1 advisory. It was discovered that LedgerSMB did not check the origin of HTML fragments. An attacker could...

USN-7647-1: LedgerSMB vulnerabilities

It was discovered that LedgerSMB did not check the origin of HTML fragments. An attacker could possibly use this issue to send a maliciously crafted URL to the server and obtain sensitive information, or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubun...

CVE-2021-3694

LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure...