139 matches found
CVE-2025-60375
Perfex CRM versions prior to 3.3.1 are vulnerable to an authentication bypass in the admin login mechanism due to insufficient server-side validation. An attacker can gain unauthorized access to user accounts, including administrative accounts , by sending a login request with empty username and ...
EUVD-2020-7137
Malware in sbrugna...
EUVD-2014-5505
Malware in sbrugna...
EUVD-2020-7591
Malware in sbrugna...
EUVD-2020-17279
Malware in sbrugna...
EUVD-2020-17397
Malware in sbrugna...
EUVD-2015-2947
Malware in sbrugna...
EUVD-2024-22426
Malicious code in bioql PyPI...
EUVD-2024-38231
Malicious code in bioql PyPI...
EUVD-2023-3134
Malicious code in bioql PyPI...
EUVD-2025-13046
Malicious code in bioql PyPI...
EUVD-2021-8804
Malicious code in bioql PyPI...
Horilla 代码问题漏洞
Horilla is a free and open source HR software from Horilla Inc. A code issue vulnerability exists in Horilla versions prior to 1.4.0 that stems from a file upload process that performs only browser-side validation without implementing server-side checks, which could lead to stored cross-site...
CVE-2025-8942 WP Hotel Booking < 2.2.3 - Subscriber+ Rating Manipulation
The WP Hotel Booking WordPress plugin before 2.2.3 lacks proper server-side validation for review ratings, allowing an attacker to manipulate the rating value e.g., sending negative or out-of-range values by intercepting and modifying requests...
CVE-2025-0309
An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient validation allows Netskope Client to connect to any other server with Public Signed CA TLS certificates and send specially crafted responses to...
CVE-2025-6025 Order Tip for WooCommerce <= 1.5.4 - Unauthenticated Tip Manipulation to Negative Value Leading to Unauthorized Discounts
The Order Tip for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Improper Input Validation in all versions up to, and including, 1.5.4. This is due to lack of server-side validation on the data-tip attribute, which makes it possible for unauthenticated attackers to apply an...
CVE-2025-0309 Netskope Client Local Elevation of Privileges
An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges on the system. The insufficient validation allows Netskope Client to connect to any other server with Public Signed CA TLS certificates and send specially crafted responses to...
CVE-2025-0309
CVE-2025-0309 describes a local privilege escalation in Netskope Client for Windows due to insufficient validation on the server connection endpoint. An attacker-controlled server using publicly signed TLS certificates can cause the client to send specially crafted responses, enabling privilege e...
