EUVD-2001-1050

Malware in sbrugna...

EUVD-2018-17108

Malware in sbrugna...

EUVD-2021-18800

Malware in sbrugna...

EUVD-2014-0079

Malware in sbrugna...

EUVD-2024-2500

Malicious code in bioql PyPI...

EUVD-2022-5326

Malicious code in bioql PyPI...

EUVD-2023-54511

Malicious code in bioql PyPI...

EUVD-2025-3995

Malicious code in bioql PyPI...

EUVD-2022-31924

Malicious code in bioql PyPI...

EUVD-2025-18829

Malicious code in bioql PyPI...

EUVD-2022-4755

Malicious code in bioql PyPI...

EUVD-2023-42343

Malicious code in bioql PyPI...

EUVD-2025-10934

Malicious code in bioql PyPI...

CVE-2025-7049

The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 67.7.0 via the 'MJgmgtgmgtadduser' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

CVE-2023-24029

In Progress WSFTP Server before 8.8, it is possible for a host administrator to elevate their privileges via the administrative interface due to insufficient authorization controls applied on user modification workflows...

CVE-2020-35722

CSRF in Web Compliance Manager in Quest Policy Authority 8.1.2.200 allows remote attackers to force user modification/creation via a specially crafted link to the submitUser.jsp file. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2017-11179

FineCMS through 2017-07-11 has stored XSS in route=admin when modifying user information, and in route=register when registering a user account...

CVE-2003-0732

CiscoWorks Common Management Foundation CMF 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Admin user on the Modify or delete users pages...

CVE-2025-3578

The CVE-2025-3578 vulnerability in Aidex affects versions prior to 1.7 and can be exploited by an authenticated user to list credentials of other users, create or modify users, and disclose sensitive information from production/development environments. It enables exfiltration of details about th...

DEBIAN-CVE-2025-25748

A CSRF vulnerability in the gestioneutenti.php endpoint of HotelDruid 3.0.7 allows attackers to perform unauthorized actions e.g., modifying user passwords on behalf of authenticated users by exploiting the lack of origin or referrer validation and the absence of CSRF tokens. NOTE: this is disput...