CVE-2025-61417

Cross-Site Scripting XSS vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/mediamanager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their browser context, allowing the attacker to...

CVE-2025-61417

Cross-Site Scripting XSS vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/mediamanager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their browser context, allowing the attacker to...

EUVD-2012-0365

Malware in sbrugna...

EUVD-2010-0601

Malware in sbrugna...

EUVD-2006-5484

Malware in sbrugna...

EUVD-2014-3721

Malware in sbrugna...

EUVD-2018-18135

Malware in sbrugna...

EUVD-2010-0602

Malware in sbrugna...

EUVD-2016-7444

Malware in sbrugna...

EUVD-2011-1584

Malware in sbrugna...

EUVD-2005-1454

Malware in sbrugna...

EUVD-2010-0603

Malware in sbrugna...

EUVD-2013-3381

Malware in sbrugna...

EUVD-2022-52053

Malicious code in bioql PyPI...

EUVD-2025-13372

Malicious code in bioql PyPI...

EUVD-2023-3106

Malicious code in bioql PyPI...

EUVD-2023-3032

Malicious code in bioql PyPI...

EUVD-2025-25830

Malicious code in bioql PyPI...

EUVD-2025-7602

Malicious code in bioql PyPI...

Arbitrary Code Execution

badaso/core is vulnerable to Arbitrary Code Execution ACE. The vulnerability is due to improper content-type validation in the Media Manager file-upload endpoint, which allows an attacker to upload PHP files disguised as other formats and execute arbitrary system commands, leading to full host...