EUVD-2020-13724

Malware in sbrugna...

EUVD-2020-9951

Malware in sbrugna...

EUVD-2019-7938

Malware in sbrugna...

EUVD-2020-13723

Malware in sbrugna...

EUVD-2020-13725

Malware in sbrugna...

EUVD-2020-13588

Malware in sbrugna...

EUVD-2020-13722

Malware in sbrugna...

EUVD-2018-9939

Malware in sbrugna...

EUVD-2024-16992

Malicious code in bioql PyPI...

EUVD-2025-4510

Malicious code in bioql PyPI...

EUVD-2023-30826

Malicious code in bioql PyPI...

CVE-2023-27037

Qibosoft QiboCMS v7 was discovered to contain a remote code execution RCE vulnerability via the GetTitle function at labelsetrs.php...

CVE-2020-18022

Cross Site Scripting XSS in Qibosoft QiboCMS v7 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information by injecting arbitrary commands in a HTTP request to the "ewebeditor\3.1.1\kindeditor.js" component...

CVE-2020-20944

An issue in /admin/index.php?lfj=mysql=del of Qibosoft v7 allows attackers to arbitrarily delete files...

CVE-2020-20943

A Cross-Site Request Forgery CSRF in /member/post.php?job=postnew=post of Qibosoft v7 allows attackers to force victim users into arbitrarily publishing new articles via a crafted URL...

CVE-2020-20946

Qibosoft v7 contains a stored cross-site scripting XSS vulnerability in the component /admin/index.php?lfj=friendlink=add...

CVE-2020-20808

Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd and starttijd parameters of do/search.php...

CVE-2020-20945

A Cross-Site Request Forgery CSRF in /admin/index.php?lfj=member=editmember of Qibosoft v7 allows attackers to arbitrarily add administrator accounts...

CVE-2019-17613

qibosoft 7 allows remote code execution because do/jf.php makes eval calls. The attacker can use the Point Introduction Management feature to supply PHP code to be evaluated. Alternatively, the attacker can access admin/index.php?lfj=jfadmin=addjf via CSRF, as demonstrated by a payload in the...

CVE-2019-5725

qibosoft through V7 allows remote attackers to read arbitrary files via the member/index.php main parameter, as demonstrated by SSRF to a URL on the same web site to read a .sql file...