CVE-2025-31702

A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user credentials could exploit the vulnerability to access certain data which are restricted to admin privileges, such as system-sensitive files through specific HTTP request. This may...

EUVD-2019-1091

Malware in sbrugna...

EUVD-2020-27461

Malware in sbrugna...

EUVD-2020-27418

Malware in sbrugna...

EUVD-2002-0566

Malware in sbrugna...

EUVD-2022-41310

Malicious code in bioql PyPI...

EUVD-2025-32066

Malicious code in bioql PyPI...

EUVD-2025-28218

Malicious code in bioql PyPI...

EUVD-2024-34950

Malicious code in bioql PyPI...

EUVD-2023-24092

Malicious code in bioql PyPI...

EUVD-2024-41640

Malicious code in bioql PyPI...

JEPaaS 访问控制错误漏洞

JEPaaS is a low-code rapid development platform for building enterprise-class applications. A security vulnerability exists in JEPaaS 7.2.8, which stems from the doFilterInternal function of the Filter Handler component not properly enforcing access control. The vulnerability can be exploited by ...

CVE-2025-54551

Synapse Mobility 8.0, 8.0.1, 8.0.2, 8.1, and 8.1.1 contain a privilege escalation vulnerability through external control of Web parameter. If exploited, a user of the product may escalate the privilege and access data that the user do not have permission to view by altering the parameters of the...

D-Link DIR-818L Injection Vulnerability

The D-Link DIR-818L is a WiFi router from the Chinese company AUO D-Link. The D-Link DIR-818L suffers from an injection vulnerability that originates from a misbehavior in the file /htdocs/cgibin, which can be exploited by an attacker to bypass authentication and access restricted data by injecti...

PT-2025-34074 · Frappé Technologies · Frappe

Name of the Vulnerable Software and Affected Versions: Frappe versions prior to 15.74.2 Frappe versions prior to 14.96.15 Description: Frappe is a full-stack web application framework. A carefully crafted request could extract data that the user would normally not have access to via SQL injection...

D-Link DIR-818L 注入漏洞

The D-Link DIR-818L is a WiFi router from the Chinese company AUO D-Link. The D-Link DIR-818L suffers from an injection vulnerability that originates from a misbehavior in the file /htdocs/cgibin, which can be exploited by an attacker to bypass authentication and access restricted data by injecti...

WordPress The E-Commerce ERP Elevation of Privilege Vulnerability

WordPress The E-Commerce ERP is a comprehensive management system designed for small and medium-sized enterprises, integrating financial management, human resources management, procurement management, sales management, inventory management and production management, helping enterprises to optimiz...

ETQ Reliance 安全漏洞

ETQ Reliance is a quality management system from ETQ Corporation. A security vulnerability exists in ETQ Reliance that stems from a misconfiguration of the API authorization logic, which could allow an unauthenticated attacker to bypass access control checks and retrieve limited sensitive resourc...

CVE-2025-53029

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2025-42986

Due to a missing authorization check in an obsolete RFC enabled function module in SAP BASIS, an authenticated low-privileged attacker could call a Remote Function Call RFC, potentially accessing restricted system information. This results in low impact on confidentiality, with no impact on...