EUVD-2007-2348

Malware in sbrugna...

EUVD-2017-7849

Malware in sbrugna...

EUVD-2009-0039

Malware in sbrugna...

EUVD-2022-33812

Malicious code in bioql PyPI...

EUVD-2023-51177

Malicious code in bioql PyPI...

EUVD-2023-33400

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2007-2353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the...

Malicious code in netsuite-suitetalk-wsdl-v2019-2.0 (npm)

The package netsuite-suitetalk-wsdl-v2019-2.0 was found to contain malicious code...

MAL-2025-27319 Malicious code in netsuite-suitetalk-wsdl-v2019-2.0 (npm)

The package netsuite-suitetalk-wsdl-v2019-2.0 was found to contain malicious code...

MAL-2025-27320 Malicious code in netsuite-suitetalk-wsdl-v2020-1.0 (npm)

The package netsuite-suitetalk-wsdl-v2020-1.0 was found to contain malicious code...

CVE-2018-17865

A cross-site scripting XSS vulnerability in SAP J2EE Engine 7.01 allows remote attackers to inject arbitrary web script via the wsdlPath parameter to /ctcprotocol/Protocol. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2017-16665

RemObjects Remoting SDK 9 1.0.0.0 for Delphi is vulnerable to a reflected Cross Site Scripting XSS attack via the service parameter to the /soap URI, triggering an invalid attempt to generate WSDL...

Linux Distros Unpatched Vulnerability : CVE-2013-6501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The default soap.wsdlcachedir setting in 1 php.ini-production and 2 php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier...

PT-2024-4722 · Unknown · Сервис Обновлений

Name of the Vulnerable Software and Affected Versions: Сервис обновлений affected versions not specified Description: The issue is related to the WSDL request handler in the "Сервис обновлений" software, which is associated with incorrect restriction of the directory path name. This could allow a...

[SECURITY] Fedora 40 Update: wsdl4j-1.6.3-30.fc40

The Web Services Description Language for Java Toolkit WSDL4J allows the creation, representation, and manipulation of WSDL documents describing services. This code base will eventually serve as a reference implementation of the standard created by JSR110...

CVE-2023-47020

Multiple Cross-Site Request Forgery CSRF chaining in NCR Terminal Handler v.1.5.1 allows privileges to be escalated by an attacker through a crafted request involving user account creation and adding the user to an administrator group. This is exploited by an undisclosed function in the WSDL that...

CVE-2023-47020

Multiple Cross-Site Request Forgery CSRF chaining in NCR Terminal Handler v.1.5.1 allows privileges to be escalated by an attacker through a crafted request involving user account creation and adding the user to an administrator group. This is exploited by an undisclosed function in the WSDL that...

Cross site request forgery (csrf)

Multiple Cross-Site Request Forgery CSRF chaining in NCR Terminal Handler v.1.5.1 allows privileges to be escalated by an attacker through a crafted request involving user account creation and adding the user to an administrator group. This is exploited by an undisclosed function in the WSDL that...

CVE-2023-47020

CVE-2023-47020 affects NCR Terminal Handler v1.5.1. A CSRF chaining flaw allows an attacker to escalate privileges by crafting a request that creates a user and adds them to the administrator group, exploiting an undisclosed WSDL function that lacks security controls and can accept custom content...

CVE-2023-47020

Multiple Cross-Site Request Forgery CSRF chaining in NCR Terminal Handler v.1.5.1 allows privileges to be escalated by an attacker through a crafted request involving user account creation and adding the user to an administrator group. This is exploited by an undisclosed function in the WSDL that...