378 matches found
EUVD-2025-205449
Cola Dnslog v1.3.2 is vulnerable to Directory Traversal. When a DNS query for a TXT record is processed, the application concatenates the requested URL or a portion of it directly with a base path using os.path.join. This bypass allows directory traversal or absolute path injection, leading to th...
CVE-2023-53981 PhotoShow 3.0 Remote Code Execution via Exiftran Path Injection
PhotoShow 3.0 contains a remote code execution vulnerability that allows authenticated administrators to inject malicious commands through the exiftran path configuration. Attackers can exploit the ffmpeg configuration settings by base64 encoding a reverse shell command and executing it through a...
PT-2025-52646
Name of the Vulnerable Software and Affected Versions Mattermost versions 11.1.x through 11.1.0 Mattermost versions 11.0.x through 11.0.5 Mattermost versions 10.12.x through 10.12.3 Mattermost versions 10.11.x through 10.11.7 Mattermost Jira plugin versions 4.4.0 and earlier Description The...
TencentOS Server 3: libssh (TSSA-2022:0067)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0067 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
CVE-2025-11844 XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function
Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the searchitemctrlf function located in src/smolagents/visionwebbrowser.py. The function constructs an XPath query by directly concatenating user-supplied input into the XPath expression without proper sanitizatio...
EUVD-2014-2880
Malware in sbrugna...
EUVD-2019-3197
Malware in sbrugna...
EUVD-2017-1597
Malware in sbrugna...
EUVD-2012-5116
Malware in sbrugna...
EUVD-2024-2682
Malicious code in bioql PyPI...
EUVD-2024-29861
Malicious code in bioql PyPI...
EUVD-2023-33015
Malicious code in bioql PyPI...
EUVD-2023-0150
Malicious code in bioql PyPI...
EUVD-2022-28553
Malicious code in bioql PyPI...
EUVD-2024-29862
Malicious code in bioql PyPI...
EUVD-2024-44829
Malicious code in bioql PyPI...
Exploit for CVE-2024-32019
Privilege Escalation via ndsudo Netdata Local Exploit Thi...
Exploit for Link Following in Git
💥 CVE-2024-32002 – Git Submodule Path Injection PoC 🧠 Visã...
RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Important) (RHSA-2025:16487)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:16487 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...
django: Django Path Injection Vulnerability
A flaw was found in Django. The request.path component of HTTP requests is not properly escaped when included in internal response logging, allowing remote attackers to manipulate log output through crafted URLs. This vulnerability allows an attacker to inject arbitrary content into Django's...