EUVD-2015-2012

Malware in sbrugna...

EUVD-2014-0939

Malware in sbrugna...

EUVD-2021-23826

Malware in sbrugna...

EUVD-2016-1944

Malware in sbrugna...

EUVD-2015-5062

Malware in sbrugna...

PT-2025-40973

Name of the Vulnerable Software and Affected Versions WP Reset versions prior to 2.06 Description The WP Reset plugin for WordPress is susceptible to exposure of sensitive information in all versions up to and including 2.05. This occurs through the WF Licensing::log method when debugging is...

EUVD-2024-51560

Malicious code in bioql PyPI...

EUVD-2023-53297

Malicious code in bioql PyPI...

EUVD-2024-48560

Malicious code in bioql PyPI...

EUVD-2023-23593

Malicious code in bioql PyPI...

EUVD-2024-17595

Malicious code in bioql PyPI...

EUVD-2023-36692

Malicious code in bioql PyPI...

EUVD-2023-34178

Malicious code in bioql PyPI...

CVE-2025-41045

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'datasconfigethicallicensekey' parameter in /apprain/admin/config/ethical...

CVE-2025-41045

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'datasconfigethicallicensekey' parameter in /apprain/admin/config/ethical...

CVE-2025-41045

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'datasconfigethicallicensekey' parameter in /apprain/admin/config/ethical...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the datasconfigethicallicensekey parameter in the /apprain/admin/config/ethical process. An attacker can execute arbitrary JavaScript code in the context of a user's browser by submitting crafted input that ...

CVE-2025-41045 Stored Cross-Site Scripting vulnerability in appRain CMF

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'datasconfigethicallicensekey' parameter in /apprain/admin/config/ethical...

CVE-2025-41045

appRain CMF 4.0.5 contains a stored authenticated XSS flaw due to improper validation of input in data[sconfig][ethical_licensekey] at /apprain/admin/config/ethical. Impact is client-side script execution in victims’ browsers; no fixed version is listed. Remediation is not provided in the sources...

Linux Distros Unpatched Vulnerability : CVE-2019-13033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. This license can be use...