EUVD-2019-6961

Malware in sbrugna...

EUVD-2020-18372

Malware in sbrugna...

EUVD-2015-5440

Malware in sbrugna...

EUVD-2014-5644

Malware in sbrugna...

EUVD-2005-1934

Malware in sbrugna...

EUVD-2005-4259

Malware in sbrugna...

EUVD-2013-1801

Malware in sbrugna...

EUVD-2017-0363

Malware in sbrugna...

EUVD-2018-18356

Malware in sbrugna...

EUVD-2017-8028

Malware in sbrugna...

EUVD-2021-11940

Malware in sbrugna...

EUVD-2011-0069

Malware in sbrugna...

EUVD-2020-2942

Malware in sbrugna...

EUVD-2005-4712

Malware in sbrugna...

EUVD-2013-3486

Malware in sbrugna...

CVE-2025-10696

OpenSupports exposes an endpoint that allows the list of 'supervised users' for any account to be edited, but it does not validate whether the actor is the owner of that list. A Level 1 staff member can modify the supervision relationship of a third party the target user, who can then view the...

CVE-2025-9875

The Event Tickets, RSVPs, Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ticketspot' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

CVE-2025-10696

OpenSupports exposes an endpoint that allows the list of 'supervised users' for any account to be edited, but it does not validate whether the actor is the owner of that list. A Level 1 staff member can modify the supervision relationship of a third party the target user, who can then view the...

CVE-2025-10692

The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...

CVE-2025-10696

CVE-2025-10696 affects OpenSupports 4.11.0. An endpoint allows editing the list of 'supervised users' for any account without verifying ownership, enabling a Level 1 staff member to modify the supervision relationship of a target user. This can let the target view tickets belonging to the added s...