CVE-2025-61118

mCarFix Motorists App version 2.3 package name com.skytop.mcarfix, developed by Paniel Mwaura, contains improper access control vulnerabilities. Attackers may bypass verification to arbitrarily register accounts, and by tampering with sequential numeric IDs, gain unauthorized access to user data...

CVE-2025-11672

CVE-2025-11672 concerns Uniweb/SoliPACS WebServer by EBM Technologies with a Missing Authentication vulnerability that allows unauthenticated remote access to a page exposing user group names. Affected component: web server software; root cause described as missing authentication/authorization on...

EBM Uniweb/SoliPACS WebServer 访问控制错误漏洞

EBM Uniweb/SoliPACS WebServer is a medical image archiving and communication system from Enterprise Business Machine EBM, Inc. of Taiwan, China. An access control error vulnerability exists in the EBM Uniweb/SoliPACS WebServer that stems from a lack of authentication and could allow an...

EUVD-2018-5299

Malware in sbrugna...

EUVD-2017-16710

Malware in sbrugna...

EUVD-2007-6021

Malware in sbrugna...

EUVD-2018-6719

Malware in sbrugna...

EUVD-2021-14666

Malware in sbrugna...

EUVD-2014-4838

Malware in sbrugna...

EUVD-2018-4080

Malware in sbrugna...

EUVD-2018-1905

Malware in sbrugna...

EUVD-2025-4181

Malicious code in bioql PyPI...

EUVD-2025-4180

Malicious code in bioql PyPI...

EUVD-2024-53000

Malicious code in bioql PyPI...

EUVD-2025-4179

Malicious code in bioql PyPI...

EUVD-2025-11143

Malicious code in bioql PyPI...

CVE-2025-27238

Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them...

BIT-NIFI-2022-33140 Improper Neutralization of Command Elements in Shell User Group Provider

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...

CVE-2025-27238

Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them...

CVE-2025-27238

Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them...