CVE-2025-41073 Path Traversal in Gandia Integra Total by TESI

Path Traversal vulnerability in version 4.4.2236.1 of TESI Gandia Integra Total. This issue allows an authenticated attacker to download a ZIP file containing files from the server, including those located in parent directories e.g., ......, by exploiting the “direstudio” parameter in...

PT-2025-43440

Name of the Vulnerable Software and Affected Versions TESI Gandia Integra Total version 4.4.2236.1 Description An authenticated attacker can download a ZIP file containing files from the server, including those in parent directories. This is possible by exploiting the direstudio parameter in the...

EUVD-2013-1672

Malware in sbrugna...

EUVD-2016-1731

Malware in sbrugna...

VirusTotal Finds 44 Undetected SVG Files Used to Deploy Base64-Encoded Phishing Pages

Cybersecurity researchers have flagged a new malware campaign that has leveraged Scalable Vector Graphics SVG files as part of phishing attacks impersonating the Colombian judicial system. The SVG files, according to VirusTotal, are distributed via email and designed to execute an embedded...

Malicious code in mp3-file-zip-d-ownload-37823-billys-live-bait-gqddl-gymxld (npm)

The package mp3-file-zip-d-ownload-37823-billys-live-bait-gqddl-gymxld was found to contain malicious code...

MAL-2025-26809 Malicious code in mp3-file-zip-d-ownload-6863-lp5-h6rvm-mfjeql (npm)

The package mp3-file-zip-d-ownload-6863-lp5-h6rvm-mfjeql was found to contain malicious code...

MAL-2025-26803 Malicious code in mp3-file-zip-d-ownload-2021-390205-the-million-things-that-never-happened-o4c7i-uqspup (npm)

The package mp3-file-zip-d-ownload-2021-390205-the-million-things-that-never-happened-o4c7i-uqspup was found to contain malicious code...

Malicious code in mp3-file-zip-d-ownload-10788-too-rye-ay-2wcus-xztuui (npm)

The package mp3-file-zip-d-ownload-10788-too-rye-ay-2wcus-xztuui was found to contain malicious code...

MAL-2025-26812 Malicious code in mp3-file-zip-d-ownload-the-liberty-of-norton-folgate-5wxzq-azpyay (npm)

The package mp3-file-zip-d-ownload-the-liberty-of-norton-folgate-5wxzq-azpyay was found to contain malicious code...

Malicious code in mp3-file-zip-d-ownload-25737-the-dividing-island-m1xnl-ssmrpa (npm)

The package mp3-file-zip-d-ownload-25737-the-dividing-island-m1xnl-ssmrpa was found to contain malicious code...

MAL-2025-26805 Malicious code in mp3-file-zip-d-ownload-314931-strawberry-mansion-blqz5-upygue (npm)

The package mp3-file-zip-d-ownload-314931-strawberry-mansion-blqz5-upygue was found to contain malicious code...

Mars: ███████ - Publicly Accessible public_html Directory Exposing WordPress Configuration

A publicly accessible directory containing sensitive WordPress configuration files, including database credentials, authentication keys, and API secrets, was discovered. The vulnerability allowed unauthorized access to critical system information through a downloadable zip file. The security team...

MAL-2024-9382 Malicious code in mp3-file-zip-d-ownload-33971-the-imagination-stage-ar0bb-cvzjxl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d397cb1db7e38b452c53b76a84ba968b5f74923158192a310862474b0bf7b0df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9386 Malicious code in mp3-file-zip-d-ownload-welcome-to-mali-ntp96-jgcurk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e7e81cbd6ad8ee7eb04588e6fec967a31ee4e9528bf73c5c1c3e5f53565645f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9401 Malicious code in zip-mp3-a-lbum-do-wnload-new-in-the-future-vrf78-daqfza (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91e46e5ef66303112352a974ee7bc6779610608153a5c47dc2c5693586b6c6b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress plugin Download Plugins and Themes in ZIP from Dashboard 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

CVE-2017-20101

A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zipdownload. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely...

Information disclosure

A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zipdownload. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely...

CVE-2022-21829

Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from those zip files which could lead to an RCE. Fixed by enforcing ‘concretesecure’ instead of ‘concrete’. Concrete now only makes requests over https even a request comes in via http...