650 matches found
CVE-2025-37138
An authenticated command injection vulnerability exists in the command line interface binary of AOS-10 GW and AOS-8 Controllers/Mobility Conductor operating system. Exploitation of this vulnerability requires physical access to the hardware controllers. A successful attack could allow an...
EUVD-2025-34552
The WP ViewSTL plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'viewstl' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...
PT-2025-41727
Name of the Vulnerable Software and Affected Versions Tomofun Furbo 360 versions prior to FB0035 FW 036 Tomofun Furbo Mini versions prior to MC0020 FW 074 Description A security issue exists in Tomofun Furbo 360 and Furbo Mini related to insecure storage of sensitive information. The issue is...
EUVD-2025-33710
The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Stored Cross-Site Scripting via the ‘csjobtitle’ parameter in all versions up to, and including, 7.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
SUSE CVE-2025-11412
A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfdelfgcrecordvtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and...
CVE-2025-61906
Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 17.8 and 18.2, in some situations, Opencast's editor may publish a video without notifying the user. This may lead to users accidentally publishing media not meant for...
CVE-2025-53967
Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that is used by a fetchWithRetry curl command. The vulnerable endpoint fails to properly sanitize...
CVE-2025-11204
The CVE-2025-11204 entry concerns the WordPress plugin RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login, affected up to version 6.0.6.2. The connected sources confirm an authenticated (Administrator+) SQL Injection due to insufficient escaping of user inpu...
DEBIAN-CVE-2025-11412
A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfdelfgcrecordvtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and...
EUVD-2019-6856
Malware in sbrugna...
EUVD-2018-16618
Malware in sbrugna...
EUVD-2020-17399
Malware in sbrugna...
EUVD-2020-3984
Malware in sbrugna...
EUVD-2021-10763
Malware in sbrugna...
EUVD-2018-14743
Malware in sbrugna...
EUVD-2012-6585
Malware in sbrugna...
EUVD-2010-5307
Malware in sbrugna...
EUVD-2025-25475
Malicious code in bioql PyPI...