CVE-2026-13050

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process could allow an authenticated privileged user to execute arbitrary code via a specially crafted requests to the Management Web UI.This vulnerability affects Fireware OS 11.8 up to and including 11.12.4Update1, 12.0 up ...

CVE-2026-25623 Arista Edge Threat Management NGFW UI Arbitrary Command Execution

An input validation command execution vulnerability exists in the browser management pipeline of Arista Edge Threat Management - Arista Next Generation Firewall NGFW. Authenticated administrators can leverage this exposure to obtain underlying terminal script code processing execution permissions...

RabbitMQ: Unsanitized vhost names allow for XSS in management UI

...

CVE-2026-44839 RabbitMQ: Unsanitized vhost names allow for XSS in management UI

RabbitMQ is a messaging and streaming broker. From 3.7.0 to before 4.1.2 and 4.0.13, This vulnerability is fixed in 4.1.2 and 4.0.13...

CVE-2021-22987

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3 when running in Appliance mode, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has an...

EUVD-2019-16148

Malware in sbrugna...

EUVD-2020-27058

Malware in sbrugna...

EUVD-2019-16184

Malware in sbrugna...

EUVD-2020-27094

Malware in sbrugna...

EUVD-2019-16185

Malware in sbrugna...

EUVD-2021-10105

Malware in sbrugna...

EUVD-2018-7207

Malware in sbrugna...

EUVD-2019-16216

Malware in sbrugna...

EUVD-2019-16156

Malware in sbrugna...

EUVD-2018-17292

Malware in sbrugna...

EUVD-2018-17280

Malware in sbrugna...

EUVD-2021-10108

Malware in sbrugna...

EUVD-2018-7205

Malware in sbrugna...

EUVD-2022-32157

Malicious code in bioql PyPI...

CVE-2020-5902

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote Code Execution RCE vulnerability in undisclosed pages...