PT-2026-39607

A reflected cross-site scripted XSS vulnerability in the acc-menu billings.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

CVE-2025-61312

A reflected cross-site scripted XSS vulnerability in the acc-menupricess.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

CVE-2025-61310

A reflected cross-site scripted XSS vulnerability in the acc-menubillings.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

CVE-2009-4905

Multiple cross-site request forgery CSRF vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of administrators for requests that change 1 passwords, 2 usernames, and 3 e-mail addresses...

CVE-2009-4906

Cross-site request forgery CSRF vulnerability in index.php in Acc PHP eMail 1.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords...

CVE-1999-0383

ACC Tigris allows public access without a login...

CVE-2025-14190 Chanjet TPlus sql injection

A flaw has been found in Chanjet TPlus up to 20251121. Affected by this vulnerability is an unknown functionality of the file /tplus/ajaxpro/Ufida.T.SM.UIP.MultiCompanySettingController,Ufida.T.SM.UIP.ashx?method=Load. This manipulation of the argument currentAccId causes sql injection. It is...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988843)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988843 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: ralink: fix a refcount leak in illaccofsetup ofnodeputnp needs to be called when pdev ==...

EUVD-2009-4868

Malware in sbrugna...

EUVD-2014-7258

Malware in sbrugna...

EUVD-2017-3114

Malware in sbrugna...

EUVD-2008-6262

Malware in sbrugna...

EUVD-2009-4869

Malware in sbrugna...

EUVD-2008-6263

Malware in sbrugna...

EUVD-2017-3116

Malware in sbrugna...

EUVD-2008-6264

Malware in sbrugna...

EUVD-2017-3115

Malware in sbrugna...

EUVD-1999-0383

Malware in sbrugna...

EUVD-2023-12307

Malicious code in bioql PyPI...

MAL-2025-10624 Malicious code in @zalastax/nolb-acc (npm)

The package @zalastax/nolb-acc was found to contain malicious code...