EUVD-2007-6609

Malware in sbrugna...

EUVD-2014-8505

Malware in sbrugna...

EUVD-2020-29948

Malware in sbrugna...

EUVD-2022-33778

Malicious code in bioql PyPI...

EUVD-2024-2499

Malicious code in bioql PyPI...

EUVD-2024-1100

Malicious code in bioql PyPI...

EUVD-2025-14348

Malicious code in bioql PyPI...

EUVD-2025-31662

Malicious code in bioql PyPI...

EUVD-2024-45617

Malicious code in bioql PyPI...

EUVD-2022-3446

Malicious code in bioql PyPI...

CVE-2025-59950

FreshRSS is a free, self-hostable RSS aggregator. In versions 1.26.3 and below, due to a bypass of double clickjacking protection confirmation dialog, it is possible to trick the admin into clicking the Promote button in another user's management page after the admin double clicks on a button...

CVE-2025-59950

FreshRSS is a free, self-hostable RSS aggregator. In versions 1.26.3 and below, due to a bypass of double clickjacking protection confirmation dialog, it is possible to trick the admin into clicking the Promote button in another user's management page after the admin double clicks on a button...

CVE-2025-59950: Improper Restriction of Rendered UI Layers or Frames

FreshRSS is a free, self-hostable RSS aggregator. In versions 1.26.3 and below, due to a bypass of double clickjacking protection confirmation dialog, it is possible to trick the admin into clicking the Promote button in another user's management page after the admin double clicks on a button...

CVE-2025-59950 FreshRSS: Double clickjacking can lead to privilege escalation

FreshRSS is a free, self-hostable RSS aggregator. In versions 1.26.3 and below, due to a bypass of double clickjacking protection confirmation dialog, it is possible to trick the admin into clicking the Promote button in another user's management page after the admin double clicks on a button...

CVE-2025-59950 FreshRSS: Double clickjacking can lead to privilege escalation

FreshRSS is a free, self-hostable RSS aggregator. In versions 1.26.3 and below, due to a bypass of double clickjacking protection confirmation dialog, it is possible to trick the admin into clicking the Promote button in another user's management page after the admin double clicks on a button...

CVE-2025-59950 FreshRSS: Double clickjacking can lead to privilege escalation

FreshRSS is a free, self-hostable RSS aggregator. In versions 1.26.3 and below, due to a bypass of double clickjacking protection confirmation dialog, it is possible to trick the admin into clicking the Promote button in another user's management page after the admin double clicks on a button...

CVE-2025-59950

FreshRSS

PT-2025-39920

Name of the Vulnerable Software and Affected Versions FreshRSS versions 1.26.3 and below Description FreshRSS is susceptible to a double clickjacking protection bypass. An attacker can trick an administrator into promoting themselves to "admin" and logging into other users' accounts. This is...

Malicious code in pc-analytics-promotion-creation-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9292e3bed279b8b99bcdac22deaa003418229efa19faeb2633583bc389307242 Any computer that has this package installed or running should be considered...

MAL-2025-47856 Malicious code in pc-analytics-promotion-creation-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4d66ab8f0d38376b6ec23e7703446b3c1d3849127ae2eb86050e41db25563bc Any computer that has this package installed or running should be considered...