CVE-2025-63738

An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive information via phpinfo via the a parameter to the index.php...

CVE-2025-63739

Xinhu Rainrock RockOA 2.7.0 is affected by CVE-2025-63739 due to a flaw in phpinisaveAction() in webmain/system/cogini/coginiAction.php. An authenticated user can use the a parameter on index.php to modify PHP configuration files. The vulnerability affects the cited version; Red Hat and other sou...

EUVD-2020-10630

Malware in sbrugna...

EUVD-2020-13378

Malware in sbrugna...

EUVD-2020-10633

Malware in sbrugna...

EUVD-2020-10631

Malware in sbrugna...

EUVD-2019-19202

Malware in sbrugna...

EUVD-2023-23748

Malicious code in bioql PyPI...

EUVD-2024-36774

Malicious code in bioql PyPI...

EUVD-2025-26211

Malicious code in bioql PyPI...

EUVD-2024-48266

Malicious code in bioql PyPI...

EUVD-2024-47925

Malicious code in bioql PyPI...

EUVD-2023-23984

Malicious code in bioql PyPI...

EUVD-2023-57619

Malicious code in bioql PyPI...

CVE-2025-9602

A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of the file /index.php. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used...

CVE-2025-9602

A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of the file /index.php. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used...

CVE-2025-9602

A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of the file /index.php. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used...

CVE-2025-9602 Xinhu RockOA index.php publicsaveAjax improper authorization

A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of the file /index.php. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used...

CVE-2025-9602

Xinhu RockOA versions up to 2.6.9 are affected by an improper authorization vulnerability in the publicsaveAjax function of /index.php. The issue allows remote manipulation and has publicly disclosed exploit material. Remediation is to upgrade to a version beyond 2.6.9 (or applying available patc...

CVE-2025-9602 Xinhu RockOA index.php publicsaveAjax improper authorization

A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of the file /index.php. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used...