EUVD-2012-6602

Malware in sbrugna...

URI Credential Leakage Bypass

A vulnerability in the URI library bundled with Ruby allows sensitive user credentials such as usernames or passwords in a URI to be unintentionally leaked when combining URIs using the + operator. This issue bypasses the previous fix for CVE-2025-27221. The issue affects Ruby's built-in URI...

EUVD-2025-32590

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used...

EUVD-2025-7510

Malicious code in bioql PyPI...

EUVD-2025-25855

Malicious code in bioql PyPI...

EUVD-2025-27247

Malicious code in bioql PyPI...

EUVD-2022-42492

Malicious code in bioql PyPI...

EUVD-2024-22158

Malicious code in bioql PyPI...

SUSE-SU-2025:03244-1 Security update for raptor

This update for raptor fixes the following issues: - CVE-2024-57823: Fixed integer underflow when normalizing a URI with the turtle parser bsc1235673 - CVE-2024-57822: Fixed heap buffer overread when parsing triples with the nquads parser bsc1235674...

CVE-2025-9161

A security issue exists within FactoryTalk Optix MQTT broker due to the lack of URI sanitization. This flaw enables the loading of remote Mosquito plugins, which can be used to achieve remote code execution...

PT-2025-36730

Name of the Vulnerable Software and Affected Versions: FactoryTalk Optix affected versions not specified Description: A security issue exists in FactoryTalk Optix MQTT broker due to insufficient URI sanitization. This flaw allows the loading of remote Mosquito plugins, potentially leading to remo...

CVE-2025-0083

In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Mercatus ERP 安全漏洞

Mercatus ERP is an enterprise resource planning system from Mercatus Inc. in the United States. A security vulnerability exists in Mercatus ERP version 2.00.019, which stems from an improperly controlled resource identifier in file /basico/webservice/imprimir-danfe/id...

CVE-2025-55763

CVE-2025-55763 describes a buffer overflow in CivetWeb’s URI parser (versions 1.14–1.16) that can be triggered by a crafted HTTP request, allowing a remote attacker to potentially execute arbitrary code or cause a denial of service by corrupting heap memory during request processing. The connecte...

CivetWeb 安全漏洞

CivetWeb is open source Civetweb an easy-to-use, powerful, C/C++ embeddable web server with optional CGI, SSL and Lua support. A security vulnerability exists in CivetWeb versions 1.14 through 1.16, which stems from a buffer overflow in the URI parser that could lead to remote code execution...

CVE-2025-0083

In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-0083

CVE-2025-0083 is an information-disclosure vulnerability affecting Google Android, caused by URI double encoding that allows cross-profile content access without extra privileges. The issue is referenced across multiple sources (Android Android framework/system entries in the 2025 Android bulleti...

CVE-2025-0083

In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-9263

A vulnerability has been found in Xuxueli xxl-job up to 3.1.1. Affected by this vulnerability is the function getJobsByGroup of the file /src/main/java/com/xxl/job/admin/controller/JobLogController.java. Such manipulation of the argument jobGroup leads to improper control of resource identifiers...

xxl-job Jobs Handler remove function allows improper control of resource identifiers via ID parameter

A vulnerability was found in Xuxueli xxl-job up to 3.1.1. Affected by this issue is the function remove of the file /src/main/java/com/xxl/job/admin/controller/JobInfoController.java of the component Jobs Handler. Performing manipulation of the argument ID results in improper control of resource...