96 matches found
CVE-2026-41462
🚨 CVE-2026-41462 - ProjeQtor SQL Injection Non Autenticata SQL Injection critica non autenticata in ProjeQtor ≤ 12.4.3 📌 Panoramica CVE-2026-41462 è una vulnerabilità critica di SQL Injection non autenticata nella funzionalità di accesso dello strumento di gestione progetti ProjeQtor. ID CVE :...
CVE-2024-49379
Proof of Concept PoC per CVE-2024-49379 Questo repository contiene un Proof of Concept PoC basato su Python per una vulnerabilità critica identificata in UmbrelOS. La vulnerabilità consente Cross-Site Scripting XSS, che può essere elevata a Remote Code Execution RCE in condizioni specifiche...
CVE-2025-14598
CVE-2025-14598 CVSS: 9.8 Injeção de SQL Remota Não Autenticada levando a Execução Remota de Código. Resumo Executivo Uma vulnerabilidade de Injeção de SQL foi identificada na funcionalidade de login do BET e-Portal, uma solução de software amplamente implantada em instituições de ensino para gest...
CVE-2025-69245
Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6...
CVE-2025-69245 Reflected XSS in Raytha CMS
Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6...
CVE-2025-69245 Reflected XSS in Raytha CMS
Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6...
CVE-2025-69245 Reflected XSS in Raytha CMS
Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6...
CVE-2026-26722
An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to escalate privileges via PIN component of the login functionality...
CVE-2026-26722
CVE-2026-26722 affects Key Systems Inc Global Facilities Management Software v.20230721a. A remote attacker can escalate privileges through the PIN component of the login functionality. Documents consistently indicate privilege escalation as the impact; CVSSv3.1 vectors imply Network access, Low ...
CVE-2025-14598 CVE-2025-14598
BeeS Software Solutions BET Portal contains an SQL injection vulnerability in the login functionality of affected sites. The vulnerability enables arbitrary SQL commands to be executed on the backend database...
CVE-2024-39608
A firmware update vulnerability exists in the login.cgi functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can send an unauthenticated message to trigger this vulnerability...
EUVD-2018-20422
Malware in sbrugna...
EUVD-2020-30210
Malware in sbrugna...
EUVD-2008-6901
Malware in sbrugna...
EUVD-2020-26940
Malware in sbrugna...
EUVD-2013-1123
Malware in sbrugna...
EUVD-2024-23279
Malicious code in bioql PyPI...
EUVD-2023-54092
Malicious code in bioql PyPI...