731 matches found
AndSoft e-TMS OS Command Injection Vulnerability (CNVD-2025-23563)
AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from an operating system command injection vulnerability that originates from a misuse of parameter m in file /clt/LOGINFRMoriginal.ASP, which can be exploited by an attacker to execute operating system...
AndSoft e-TMS Cross-Site Scripting Vulnerability (CNVD-2025-23562)
AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the file...
EUVD-2025-31845
A security vulnerability has been detected in JhumanJ OpnForm up to 1.9.3. Affected by this vulnerability is an unknown functionality of the file /show/submissions. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed publicly and ma...
EUVD-2025-32805
In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fixed a BTI error on returning to patched function When BPFTRAMPFCALLORIG is set, BPF trampoline uses BLR to jump back to the instruction next to call site to call the patched function. For BTI-enabled kernel, the...
EUVD-2018-3436
Malware in sbrugna...
EUVD-2014-8494
Malware in sbrugna...
EUVD-2018-3433
Malware in sbrugna...
EUVD-2007-5204
Malware in sbrugna...
EUVD-2018-3435
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987254)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987254 advisory. In the Linux kernel, the following vulnerability has been resolved: net: cdceem: fix tx fixup skb leak when usbnet transmit a skb, eem fixup it in eemtxfixup, if...
EUVD-2022-49664
Malicious code in bioql PyPI...
EUVD-2023-50942
Malicious code in bioql PyPI...
EUVD-2025-7833
Malicious code in bioql PyPI...
EUVD-2022-3252
Malicious code in bioql PyPI...
EUVD-2023-31254
Malicious code in bioql PyPI...
EUVD-2025-22953
Malicious code in bioql PyPI...
Nextcloud: tabnabbing in roundcube webmail
A tab nabbing vulnerability was discovered in Roundcube webmail. This vulnerability allowed a malicious website opened in a new tab to access the initial tab and change its location. This could be exploited to perform phishing attacks...
CVE-2025-59754
Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...
AndSoft e-TMS 命令注入漏洞
AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from an operating system command injection vulnerability that originates from a misuse of parameter m in file /clt/LOGINFRMoriginal.ASP, which can be exploited by an attacker to execute operating system...
PT-2025-40359
Name of the Vulnerable Software and Affected Versions AndSoft's e-TMS version 25.03 Description An operating system command injection issue exists in AndSoft's e-TMS version 25.03. This allows an attacker to execute operating system commands on the server. The issue is exploitable by sending a PO...