456 matches found
EUVD-2025-205449
Cola Dnslog v1.3.2 is vulnerable to Directory Traversal. When a DNS query for a TXT record is processed, the application concatenates the requested URL or a portion of it directly with a base path using os.path.join. This bypass allows directory traversal or absolute path injection, leading to th...
CVE-2023-53981 PhotoShow 3.0 Remote Code Execution via Exiftran Path Injection
PhotoShow 3.0 contains a remote code execution vulnerability that allows authenticated administrators to inject malicious commands through the exiftran path configuration. Attackers can exploit the ffmpeg configuration settings by base64 encoding a reverse shell command and executing it through a...
PT-2025-52646
Name of the Vulnerable Software and Affected Versions Mattermost versions 11.1.x through 11.1.0 Mattermost versions 11.0.x through 11.0.5 Mattermost versions 10.12.x through 10.12.3 Mattermost versions 10.11.x through 10.11.7 Mattermost Jira plugin versions 4.4.0 and earlier Description The...
TencentOS Server 3: libssh (TSSA-2022:0067)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0067 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
CVE-2025-11844 XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function
Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the searchitemctrlf function located in src/smolagents/visionwebbrowser.py. The function constructs an XPath query by directly concatenating user-supplied input into the XPath expression without proper sanitizatio...
EUVD-2019-3197
Malware in sbrugna...
EUVD-2014-2880
Malware in sbrugna...
EUVD-2017-1597
Malware in sbrugna...
EUVD-2012-5116
Malware in sbrugna...
EUVD-2024-2682
Malicious code in bioql PyPI...
EUVD-2023-0150
Malicious code in bioql PyPI...
EUVD-2024-29861
Malicious code in bioql PyPI...
EUVD-2022-28553
Malicious code in bioql PyPI...
EUVD-2023-33015
Malicious code in bioql PyPI...
EUVD-2024-29862
Malicious code in bioql PyPI...
EUVD-2024-44829
Malicious code in bioql PyPI...
Exploit for CVE-2024-32019
Privilege Escalation via ndsudo Netdata Local Exploit Thi...
Exploit for Link Following in Git
💥 CVE-2024-32002 – Git Submodule Path Injection PoC 🧠 Visã...
RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Important) (RHSA-2025:16487)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:16487 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...