EUVD-2016-10296

Malware in sbrugna...

EUVD-2020-1289

Malware in sbrugna...

EUVD-2020-29051

Malware in sbrugna...

EUVD-2007-2324

Malware in sbrugna...

EUVD-2019-0781

Malware in sbrugna...

EUVD-2022-0181

Malicious code in bioql PyPI...

EUVD-2023-30089

Malicious code in bioql PyPI...

EUVD-2023-46060

Malicious code in bioql PyPI...

EUVD-2024-0932

Malicious code in bioql PyPI...

EUVD-2022-53402

Malicious code in bioql PyPI...

EUVD-2024-23539

Malicious code in bioql PyPI...

EUVD-2022-3974

Malicious code in bioql PyPI...

CVE-2025-56154

The PHP-based blogging platform htmly version 3.0.8 is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The root cause is the insufficient sanitization of the name parameter in the /author/:name endpoint, which allows attackers to inject...

CVE-2025-59821: Improper Neutralization of Input During Web Page Generation

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.1.0, DNN’s URL/path handling and template rendering can allow specially crafted input to be reflected into a user profile that is returned to the browser. In these cases,...

Remote Code Execution (RCE)

github.com/tnborg/panel is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper path handling in the CleanPath middleware from the go-chi/chi package, which fails to process r.URL.Path, followed by flaws in backend login path exposure, which allows an attacker to bypass...

Improper Output Neutralization for Logs

Overview litestar is a Litestar - A production-ready, highly performant, extensible ASGI API Framework Affected versions of this package are vulnerable to Improper Output Neutralization for Logs via the exception logging process. An attacker can manipulate log files and forge log entries by...

RatPanel can perform remote command execution without authorization

Summary When an attacker obtains the backend login path of RatPanel including but not limited to weak default paths, brute-force cracking, etc., they can execute system commands or take over hosts managed by the panel without logging in. In addition to this remote code execution RCE vulnerability...

PT-2025-31881

Name of the Vulnerable Software and Affected Versions RatPanel versions 2.3.19 through 2.5.5 Description RatPanel is susceptible to remote code execution RCE and unauthorized access. An attacker who obtains the backend login path of RatPanel can execute system commands or take over hosts managed ...

USN-7612-1 python-flask-cors vulnerabilities

It was discovered that Flask-CORS did not correctly handle certain regular expressions. A remote attacker could possibly use this issue to leak sensitive information or bypass authentication mechanisms. CVE-2024-6839 It was discovered that Flask-CORS allowed certain CORS headers to be enabled by...

CVE-2025-34065 AVTECH IP camera, DVR, and NVR Devices Authentication Bypass via /nobody URL Path

An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr function allows unauthenticated access to any request containing "/nobody" in the URL, bypassing login controls...