BIT-JENKINS-2026-53436

Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments ./ or ../, allowing attackers to perform phishing attacks...

CVE-2026-53437

Jenkins 2.567 and earlier, and LTS 2.555.2 and earlier, are affected by a vulnerability where the redirect URL after login is improperly determined to point to Jenkins if it contains tab or newline characters between //, enabling phishing attacks. The root cause is improper handling/validation of...

Nozomi Networks Guardian和Nozomi Networks CMC 跨站脚本漏洞

Nozomi Networks Guardian and Nozomi Networks CMC are both products of the American company Nozomi Networks. Nozomi Networks Guardian is an IoT device and software inspection system. Nozomi Networks CMC is an application software that provides centralized OT and IoT security management. Both Nozom...

CVE-2026-39484 WordPress Hide My WP Ghost plugin < 7.0.00 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from n/a through 7.0.00...

EUVD-2025-206982

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in TR7 Cyber ​​Defense Inc. Web Application Firewall allows Phishing.This issue affects Web Application Firewall: from 4.30 through 16022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2025-2418

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in TR7 Cyber ​​Defense Inc. Web Application Firewall allows Phishing. This issue affects Web Application Firewall: from 4.30 before v1.4.0.117...

CVE-2025-13283 Chunghwa Telecom｜TenderDocTransfer - Arbitrary File Copy and Paste

TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Copy and Paste vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could...

EUVD-2020-6593

Malware in sbrugna...

EUVD-2007-1756

Malware in sbrugna...

EUVD-2019-15523

Malware in sbrugna...

EUVD-2020-29215

Malware in sbrugna...

EUVD-2021-24748

Malware in sbrugna...

EUVD-2021-12315

Malware in sbrugna...

EUVD-2017-10211

Malware in sbrugna...

EUVD-2008-0623

Malware in sbrugna...

EUVD-2013-2818

Malware in sbrugna...

EUVD-2014-3030

Malware in sbrugna...

EUVD-2025-17220

Malicious code in bioql PyPI...

EUVD-2025-17219

Malicious code in bioql PyPI...

EUVD-2022-40790

Malicious code in bioql PyPI...