EUVD-2018-15012

Malware in sbrugna...

PT-2025-41826

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager affected versions not specified Description A SQL injection issue exists in Ivanti Endpoint Manager. A remotely authenticated attacker can potentially read arbitrary data from the database. The issue allows for...

EUVD-2024-54935

Malicious code in bioql PyPI...

EUVD-2025-26220

Malicious code in bioql PyPI...

CVE-2025-47211

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the...

SUSE CVE-2022-50438

In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix memory leak when reading function table When the input parameter idx meets the expected case option in hinicdbggetfunctable, readdata is not released. Fix it...

CVE-2022-50438

In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix memory leak when reading function table When the input parameter idx meets the expected case option in hinicdbggetfunctable, readdata is not released. Fix it...

UBUNTU-CVE-2022-50438

In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix memory leak when reading function table When the input parameter idx meets the expected case option in hinicdbggetfunctable, readdata is not released. Fix it...

CVE-2022-50438 net: hinic: fix memory leak when reading function table

In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix memory leak when reading function table When the input parameter idx meets the expected case option in hinicdbggetfunctable, readdata is not released. Fix it...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not freeing readdata, which could lead to a memory leak...

D-Link DSL7740C DELT_file.xgi Heap Buffer Overflow

The vulnerability of the DELTfile.xgi function in the D-Link DSL7740C router microprogramming system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain read, modify, delete data, and alter device settings remotely...

CVE-2025-10266

NUP Pro developed by NewType Infortech has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2025-10266 NewType Infortech｜NUP Portal - SQL Injection

NUP Pro developed by NewType Infortech has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

PT-2025-37301

Name of the Vulnerable Software and Affected Versions: NUP Pro affected versions not specified Description: NUP Pro developed by NewType Infortech has a SQL Injection vulnerability that allows unauthenticated remote attackers to inject arbitrary SQL commands. Successful exploitation can lead to t...

CVE-2025-7746

CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause an unvalidated data injected by a malicious user potentially leading to modify or read data in a victim’s browser...

PT-2025-37129

The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mtswpt remove plugin and ajax update export code functions in all versions up to, and including, 1.1. This makes it possible for authenticated attackers, with...

Linux Distros Unpatched Vulnerability : CVE-2020-1917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xbufformatconverter, used as part of exifreaddata, was appending a terminating null character to the generated string, but was not using its standard append cha...

CVE-2025-42958 Missing Authentication check in SAP NetWeaver

Due to a missing authentication check in the SAP NetWeaver application on IBM i-series, the application allows high privileged unauthorized users to read, modify, or delete sensitive information, as well as access administrative or privileged functionalities. This results in a high impact on the...

PT-2025-36563

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver affected versions not specified Description: A missing authentication check in the SAP NetWeaver application on IBM i-series allows unauthorized users with high privileges to read, modify, or delete sensitive information, and...

Linux Distros Unpatched Vulnerability : CVE-2020-27663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference IDOR vulnerability that allows an attacker to read data from any itemTyp...