EUVD-2006-1476

Malware in sbrugna...

EUVD-2004-2092

Malware in sbrugna...

EUVD-2016-8864

Malware in sbrugna...

EUVD-2018-8059

Malware in sbrugna...

EUVD-2023-29550

Malicious code in bioql PyPI...

EUVD-2025-29669

Malicious code in bioql PyPI...

EUVD-2021-8203

Malicious code in bioql PyPI...

CVE-2025-31979

A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix SM, where the application fails to properly enforce file type restrictions during the upload process. An attacker may exploit this flaw to upload malicious or unauthorized files, such as scripts, executables, or w...

PT-2025-35109

Name of the Vulnerable Software and Affected Versions: HCL BigFix SM affected versions not specified Description: A File Upload Validation Bypass flaw exists in HCL BigFix SM, where the application does not properly enforce file type restrictions during the upload process. This allows an attacker...

Mahara 安全漏洞

Mahara is a free and open source web-based ePortfolio management system from Mahara. A security vulnerability exists in Mahara versions 23.04.8 and 24.04.4 that stems from a maliciously exported download URL that could lead to the download of unauthorized files...

Cisco Secure Firewall Management Center Software Authorization Bypass Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker to access files that they are not authorized to access. For more information about these vulnerabilities, see the Details "details"...

Adobe ColdFusion XML Injection Vulnerability

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has an XML injection vulnerability that can be exploited by attackers to access...

CVE-2025-46565 Vite's server.fs.deny bypassed with /. for files under project root

Vite is a frontend tooling framework for javascript. Prior to versions 6.3.4, 6.2.7, 6.1.6, 5.4.19, and 4.5.14, the contents of files in the project root that are denied by a file matching pattern can be returned to the browser. Only apps explicitly exposing the Vite dev server to the network usi...

Security Bulletin: IBM DataPower Gateway may permit admin users to view and edit files that are not allowed to be read via RBM access rights (CVE-2022-22326)

Summary IBM has addressed the CVE Vulnerability Details CVEID:CVE-2022-22326 DESCRIPTION: IBM MQ Appliance could allow unauthorized viewing of logs and files due to insufficient authorisation checks. CVSS Base score: 4 CVSS Temporal Score: See:...

CBL Mariner 2.0 Security Update: nvidia-container-toolkit (CVE-2024-0134)

The version of nvidia-container-toolkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0134 advisory. - NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability whe...

CVE-2024-45837

Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files...

CVE-2024-45837

Use of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software. A network-adjacent unauthenticated attacker may log in to SFTP service and obtain and/or manipulate unauthorized files...

CVE-2024-0134

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...

CVE-2024-0134

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...

CVE-2024-0134

CVE-2024-0134 affects the NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux. A specially crafted container image can create unauthorized files on the host, with naming and location control not possible by the attacker, potentially enabling data tampering. Public advisories indicate remed...