3917 matches found
CVE-2025-6894: Execution with Unnecessary Privileges
An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative ping function, which is restricted ...
CVE-2025-62409 Envoy allows large requests and responses to cause TCP connection pool crash
Envoy is a cloud-native, open source edge and service proxy. Prior to 1.36.1, 1.35.5, 1.34.9, and 1.33.10, large requests and responses can potentially trigger TCP connection pool crashes due to flow control management in Envoy. It will happen when the connection is closing but upstream data is...
CVE-2025-8486: Execution with Unnecessary Privileges
A potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with elevated privileges...
CVE-2025-11254: Improper Neutralization of Formula Elements in a CSV File
The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 27.0.3 via gallery submissions. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files, which c...
CVE-2025-9552: Undefined Security Weakness
Vulnerability in Drupal Synchronize composer.Json With Contrib Modules.This issue affects Synchronize composer.Json With Contrib Modules:...
CVE-2025-10862: Improper Neutralization of Special Elements used in an SQL Command
The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.1.3. This is due to insufficient escaping on the 'id' parameter and lack of sufficient preparation on...
CVE-2025-53967
Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that is used by a fetchWithRetry curl command. The vulnerable endpoint fails to properly sanitize...
EUVD-2019-17691
Malware in sbrugna...
EUVD-2014-2763
Malware in sbrugna...
EUVD-2017-12022
Malware in sbrugna...
EUVD-2017-3681
Malware in sbrugna...
EUVD-2017-12058
Malware in sbrugna...
EUVD-2021-11062
Malware in sbrugna...
EUVD-2012-5272
Malware in sbrugna...
EUVD-2012-5271
Malware in sbrugna...
EUVD-2016-8447
Malware in sbrugna...
EUVD-2021-18774
Malware in sbrugna...
EUVD-2017-12023
Malware in sbrugna...