2770 matches found
SmarterTools SmarterMail GUID File Upload Vulnerability
This module exploits a pre-auth remote code execution vulnerability in SmarterTools SmarterMail before version 100.0.9413. The endpoint /api/upload fails to sanitize the contextData POST parameter which can contain JSON data with a "guid" key that allows directory traversal. By leveraging this...
Chinese Hackers Weaponize Open-Source Nezha Tool in New Attack Wave
Threat actors with suspected ties to China have turned a legitimate open-source monitoring tool called Nezha into an attack weapon, using it to deliver a known malware called Gh0st RAT to targets. The activity, observed by cybersecurity company Huntress in August 2025, is characterized by the use...
Chinese Hackers Weaponize Open-Source Nezha Tool in New Attack Wave
Threat actors with suspected ties to China have turned a legitimate open-source monitoring tool called Nezha into an attack weapon, using it to deliver a known malware called Gh0st RAT to targets. The activity, observed by cybersecurity company Huntress in August 2025, is characterized by the use...
EUVD-2021-25190
Malware in sbrugna...
EUVD-2021-19460
Malware in sbrugna...
EUVD-2021-13428
Malware in sbrugna...
EUVD-2017-3176
Malware in sbrugna...
EUVD-2014-9811
Malware in sbrugna...
EUVD-2018-19006
Malware in sbrugna...
EUVD-2019-3350
Malware in sbrugna...
EUVD-2020-16566
Malware in sbrugna...
EUVD-2021-11123
Malware in sbrugna...
EUVD-2017-14325
Malware in sbrugna...
CVE-2025-61687: Unrestricted Upload of File with Dangerous Type
Flowise is a drag & drop user interface to build a customized large language model flow. A file upload vulnerability in version 3.0.7 of FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web...
EUVD-2024-44910
Malicious code in bioql PyPI...
EUVD-2024-46086
Malicious code in bioql PyPI...
EUVD-2024-43311
Malicious code in bioql PyPI...
EUVD-2024-45864
Malicious code in bioql PyPI...