2313 matches found
EUVD-2004-0549
Malware in sbrugna...
EUVD-2017-9349
Malware in sbrugna...
The vulnerability of the User Interface Tag and Backend Tag components of the IBM Instana Observability monitoring tool allows a attacker to execute arbitrary GET requests.
The vulnerability of the User Interface Tag and Backend Tag components of the IBM Instana Observability monitoring tool is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to execute arbitrary GET requests remotely...
EUVD-2025-32528
A vulnerability was determined in CmsEasy up to 7.7.7. This affects an unknown function in the library lib/inc/view.php of the component URL Handler. Executing manipulation of the argument PHPSELF can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly...
Server-side Request Forgery
astrojs/cloudflare is vulnerable to Server-side Request Forgery. The vulnerability is due to insufficient URL validation in the generated image optimization endpoint when the adapter is used with output: 'server' and the default imageService: 'compile', an attacker can exploit this to have the...
CVE-2025-58584
In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histories or proxy servers. As a result, there is a high risk that this sensitive data will be disclosed unintentionally...
CVE-2025-58584
CVE-2025-58584 pertains to credentials transmitted in the URL as parameters in HTTP requests, which can be logged or cached by servers, browsers, or proxies. Connected docs associate this with SICK Enterprise Analytics and SICK Logistic Analytics products and indicate a risk of disclosure of user...
EUVD-2025-32511
In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histories or proxy servers. As a result, there is a high risk that this sensitive data will be disclosed unintentionally...
SICK AG Baggage Analytics 安全漏洞
SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that stems from the transmission of usernames and passwords directly in URL parameters, which could lead to the...
CVE-2024-28157
creationtimestamp| type| source ---|---|--- 2025-10-05 21:00:12+00:00| published-proof-of-concept| Telegram/PhhScPJ8nIwc2vRijZXtfdgvBVI811MtSflqcGx0gK4a11w 2025-10-08 21:02:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2pk24w6ff23...
EUVD-2025-24886
Malicious code in bioql PyPI...
EUVD-2025-32144
Malicious code in bioql PyPI...
EUVD-2025-27997
Malicious code in bioql PyPI...
EUVD-2025-25324
Malicious code in bioql PyPI...
EUVD-2025-28214
Malicious code in bioql PyPI...
EUVD-2025-24161
Malicious code in bioql PyPI...
EUVD-2025-32021
Malicious code in bioql PyPI...
EUVD-2025-25273
Malicious code in bioql PyPI...
Eidos 安全漏洞
Eidos is an extensible framework for personal data management by Mayne Personal Developers. A security vulnerability exists in Eidos 0.21.0 and prior versions, which stems from a specially crafted eidos URL that triggers a custom URL handler, which could lead to remote code execution...
CVE-2025-61668 @plone/volto vulnerable to potential DoS by invoking specific URL by anonymous user
Volto is a ReactJS-based frontend for the Plone Content Management System. Versions 16.34.0 and below, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0.0-alpha.1 through 19.0.0-alpha.5, an anonymous user could cause the NodeJS server part of Volto to quit with an error when visiting a...