PT-2025-41292

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository versions 2.0 through 2.15.2 Description A Server-Side Request Forgery SSRF exists in the Remote Browser Plugin. This allows unauthenticated remote attackers to extract proxy repository credentials via crafted HTTP...

Sonatype Nexus Repository 安全漏洞

Sonatype Nexus Repository is a repository manager from Sonatype, Inc. that is used to manage, store, and distribute software, among other things. A security vulnerability exists in Sonatype Nexus Repository version 2.15.2 and earlier, which stems from a server-side request forgery in the Remote...

EUVD-2020-29098

Malware in sbrugna...

EUVD-2004-2431

Malware in sbrugna...

EUVD-2003-1595

Malware in sbrugna...

EUVD-2019-15725

Malware in sbrugna...

EUVD-2020-7685

Malware in sbrugna...

EUVD-2017-18207

Malware in sbrugna...

EUVD-2025-22510

Malicious code in bioql PyPI...

EUVD-2024-18205

Malicious code in bioql PyPI...

EUVD-2023-31811

Malicious code in bioql PyPI...

EUVD-2022-41713

Malicious code in bioql PyPI...

EUVD-2023-0977

Malicious code in bioql PyPI...

EUVD-2022-2289

Malicious code in bioql PyPI...

EUVD-2025-23274

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-8225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentication credentials...

Linux Distros Unpatched Vulnerability : CVE-2024-4472

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab CE/EE affecting all versions starting from 16.5 prior to 17.1.7, starting from 17.2 prior to 17.2.5, and starting from 17.3...

Linux Distros Unpatched Vulnerability : CVE-2017-9271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used. CVE-2017-927...

CVE-2025-46809

A Plaintext Storage of a Password vulnerability in SUSE exposes the credentials for the HTTP proxy in the log files. This issue affects Container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1: from ? before 4.3.33-150400.3.55.2; Container suse/manager/5.0/x8664/proxy-httpd:5.0.5.7.23.1: from ? befor...

CVE-2025-46809

A Plaintext Storage of a Password vulnerability in SUSE exposes the credentials for the HTTP proxy in the log files. This issue affects Container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1: from ? before 4.3.33-150400.3.55.2; Container suse/manager/5.0/x8664/proxy-httpd:5.0.5.7.23.1: from ? befor...