EUVD-2014-5961

Malware in sbrugna...

EUVD-2017-17394

Malware in sbrugna...

EUVD-2009-3149

Malware in sbrugna...

EUVD-2011-0473

Malware in sbrugna...

EUVD-2019-8124

Malware in sbrugna...

EUVD-2014-3307

Malware in sbrugna...

EUVD-2016-2595

Malware in sbrugna...

EUVD-2000-0638

Malware in sbrugna...

EUVD-2024-41613

Malicious code in bioql PyPI...

EUVD-2023-39926

Malicious code in bioql PyPI...

EUVD-2025-21779

Malicious code in bioql PyPI...

EUVD-2022-43238

Malicious code in bioql PyPI...

EUVD-2003-0079

Malicious code in bioql PyPI...

EUVD-2021-31831

Malicious code in bioql PyPI...

EUVD-2022-34636

Malicious code in bioql PyPI...

CVE-2025-10377 System Dashboard <= 2.8.20 - Cross-Site Request Forgery

The System Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.20. This is due to missing nonce validation on the sdtogglelogs function. This makes it possible for unauthenticated attackers to toggle critical logging settings...

PT-2025-39486

Name of the Vulnerable Software and Affected Versions System Dashboard plugin for WordPress versions prior to 2.8.21 Description The System Dashboard plugin for WordPress is susceptible to Cross-Site Request Forgery CSRF. This is caused by a lack of nonce validation in the sd toggle logs function...

BIT-ENVOY-GATEWAY-2025-25294 Envoy Gateway Log Injection Vulnerability

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. In all Envoy Gateway versions prior to 1.2.7 and 1.3.1 a default Envoy Proxy access log configuration is used. This format is vulnerable to log injection attacks. If the...

CVE-2025-20345

Cisco Duo Authentication Proxy is affected by a vulnerability in its debug logging function. The root cause is insufficient masking of sensitive information before it is written to system logs, allowing an authenticated, high-privileged attacker to view restricted data by accessing logs. The CVSS...

CVE-2025-54428

RevelaCode is an AI-powered faith-tech project that decodes biblical verses, prophecies and global events into accessible language. In versions below 1.0.1, a valid MongoDB Atlas URI with embedded username and password was accidentally committed to the public repository. This could allow...