EUVD-2018-10951

Malware in sbrugna...

EUVD-2021-18140

Malware in sbrugna...

EUVD-2020-18369

Malware in sbrugna...

EUVD-2020-6237

Malware in sbrugna...

EUVD-2012-6589

Malware in sbrugna...

EUVD-2021-15498

Malware in sbrugna...

EUVD-2015-2077

Malware in sbrugna...

EUVD-2001-0291

Malware in sbrugna...

EUVD-2021-24268

Malware in sbrugna...

EUVD-2010-3057

Malware in sbrugna...

EUVD-2003-0213

Malware in sbrugna...

EUVD-2017-6976

Malware in sbrugna...

PT-2025-40985

Name of the Vulnerable Software and Affected Versions Biobanking and Biomolecular Resources Negotiator version 3.15.2 Description A stored Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data. A remote user can exploit this by sending a POST request with a...

CVE-2025-40646

Stored Cross-Site Scripting XSS vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/createjobsubmit.php”, using the “JobCreatedBy” parameter. This vulnerability could allow a remote...

EUVD-2025-24803

Flowise vulnerable to RCE via Dynamic function constructor injection...

CVE-2025-58580

An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example...

EUVD-2025-32499

An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example...

CVE-2025-58578 Unlimited user creation by authorized users

A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, checking mechanisms or restrictions to limit the creation...

EUVD-2025-32501

A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, checking mechanisms or restrictions to limit the creation...

CVE-2025-11272

A vulnerability has been found in SeriaWei ZKEACMS up to 4.3. This affects the function Delete of the file src/ZKEACMS.Redirection/Controllers/UrlRedirectionController.cs of the component POST Request Handler. The manipulation leads to improper authorization. Remote exploitation of the attack is...