1087 matches found
CVE-2025-63783
A Broken Object Level Authorization BOLA vulnerability was discovered in the tRPC project mutation APIs update, delete, add/remove tag of the Onlook web application 0.2.32. The vulnerability exists because the API fails to verify the ownership or membership of the currently authenticated user for...
CVE-2024-14005 Nagios XI < 2024R1.2 Command Injection via Docker Wizard
Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...
CVE-2024-14005 Nagios XI < 2024R1.2 Command Injection via Docker Wizard
Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient validation of user-supplied input in the wizard allows an authenticated administrator to inject shell metacharacters that are incorporated into backend command invocations. Successful...
Ghost Web App Detection
Binary data ghostdetect.nbin...
Malicious code in detect-web-app (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48833 Malicious code in detect-web-app (npm)
--- -= Per source details. Do not edit below this line.=-...
Web-Application-Security-Testing
Web Application Security Testing — DVWA Lab End-to-end web ap...
CVE-2025-10240 Possibility of unintended actions when a user clicks a malicious link in the Progress Flowmon web application
A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated session...
PT-2025-41379
Name of the Vulnerable Software and Affected Versions Progress Flowmon versions prior to 12.5.5 Description A flaw exists in the Progress Flowmon web application that allows an attacker to manipulate authenticated users through malicious links. Clicking a crafted link can trigger unintended actio...
EUVD-2015-1759
Malware in sbrugna...
EUVD-2015-1758
Malware in sbrugna...
EUVD-2018-15896
Malware in sbrugna...
EUVD-2014-6203
Malware in sbrugna...
EUVD-2014-6220
Malware in sbrugna...
EUVD-2018-14649
Malware in sbrugna...
EUVD-2015-1760
Malware in sbrugna...
EUVD-2019-9831
Malware in sbrugna...
EUVD-2015-1762
Malware in sbrugna...