CVE-2025-60500

QDocs Smart School Management System 7.1 allows authenticated users with roles such as "accountant" or "admin" to bypass file type restrictions in the media upload feature by abusing the alternate YouTube URL option. This logic flaw permits uploading of arbitrary PHP files, which are stored in a...

EUVD-2005-3385

Malware in sbrugna...

EUVD-2008-3773

Malware in sbrugna...

EUVD-2019-10604

Malware in sbrugna...

EUVD-2006-5888

Malware in sbrugna...

EUVD-2012-6584

Malware in sbrugna...

EUVD-2019-7134

Malware in sbrugna...

EUVD-2019-18402

Malware in sbrugna...

EUVD-2012-6594

Malware in sbrugna...

EUVD-2008-4076

Malware in sbrugna...

EUVD-2001-1426

Malware in sbrugna...

EUVD-2023-37677

Malicious code in bioql PyPI...

EUVD-2025-14793

Malicious code in bioql PyPI...

EUVD-2024-42415

Malicious code in bioql PyPI...

EUVD-2025-8095

Malicious code in bioql PyPI...

EUVD-2025-11750

Malicious code in bioql PyPI...

EUVD-2024-54929

Malicious code in bioql PyPI...

EUVD-2021-7493

Malicious code in bioql PyPI...

CVE-2024-13986

Nagios XI 2024R1.3.2 contains a remote code execution vulnerability by chaining two flaws: an arbitrary file upload and a path traversal in the Core Config Snapshots interface. The issue arises from insufficient validation of file paths and extensions during MIB upload and snapshot rename...

CVE-2012-10054 Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE

Umbraco CMS versions prior to 4.7.1 are vulnerable to unauthenticated remote code execution via the codeEditorSave.asmx SOAP endpoint, which exposes a SaveDLRScript operation that permits arbitrary file uploads without authentication. By exploiting a path traversal flaw in the fileName parameter,...