403 matches found
CVE-2025-11648
A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini. Impacted is an unknown function of the file TFFQDN.json of the component GATT Interface URL Handler. Such manipulation leads to server-side request forgery. The attack may be performed from remote. Attacks of this nature are high...
Code issues and vulnerabilities related to Tomofun Furbo 360 and Tomofun Furbo Mini
Tomofun Furbo 360 and Tomofun Furbo Mini are both smart pet cameras from Tomofun Corporation of Taiwan, China. A code issue vulnerability exists in Tomofun Furbo 360 FB0035FW036 and earlier versions and Tomofun Furbo Mini MC0020FW074 and earlier versions, which stems from a flaw in the GATT...
CVE-2025-11648: Server-Side Request Forgery (SSRF)
A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini. Impacted is an unknown function of the file TFFQDN.json of the component GATT Interface URL Handler. Such manipulation leads to server-side request forgery. The attack may be performed from remote. Attacks of this nature are high...
EUVD-2009-1703
Malware in sbrugna...
EUVD-2002-0978
Malware in sbrugna...
EUVD-2021-0220
Malware in sbrugna...
EUVD-2021-10774
Malware in sbrugna...
CVE-2025-11332
A vulnerability was determined in CmsEasy up to 7.7.7. This affects an unknown function in the library lib/inc/view.php of the component URL Handler. Executing a manipulation of the argument PHPSELF can lead to cross site scripting. The attack may be launched remotely. The exploit has been public...
CVE-2025-11332
A vulnerability was determined in CmsEasy up to 7.7.7. This affects an unknown function in the library lib/inc/view.php of the component URL Handler. Executing a manipulation of the argument PHPSELF can lead to cross site scripting. The attack may be launched remotely. The exploit has been public...
CVE-2025-11332
CmsEasy up to version 7.7.7 is affected. The vulnerability resides in the URL Handler, specifically the lib/inc/view.php file, where manipulation of the PHP_SELF argument can cause cross-site scripting. The issue can be exploited remotely, and publicly disclosed PoCs exist. Remediation in the con...
CVE-2025-11332: Improper Neutralization of Input During Web Page Generation
A vulnerability was determined in CmsEasy up to 7.7.7. This affects an unknown function in the library lib/inc/view.php of the component URL Handler. Executing a manipulation of the argument PHPSELF can lead to cross site scripting. The attack may be launched remotely. The exploit has been public...
CmsEasy code injection vulnerability
CmsEasy is a content management system CMS for creating responsive websites from China's CmsEasy company. A code injection vulnerability exists in CmsEasy 7.7.7 and earlier versions, which stems from improper manipulation of the parameter PHPSELF in the file lib/inc/view.php in the component URL...
EUVD-2024-48590
Malicious code in bioql PyPI...
EUVD-2025-23580
Malicious code in bioql PyPI...
EUVD-2023-44476
Malicious code in bioql PyPI...
EUVD-2024-16210
Malicious code in bioql PyPI...
EUVD-2025-16726
Malicious code in bioql PyPI...
EUVD-2022-43486
Malicious code in bioql PyPI...