EUVD-2020-10251

Malware in sbrugna...

EUVD-2020-4076

Malware in sbrugna...

EUVD-2010-4714

Malware in sbrugna...

EUVD-2006-3158

Malware in sbrugna...

EUVD-2006-6070

Malware in sbrugna...

EUVD-2008-0819

Malware in sbrugna...

EUVD-2018-4896

Malware in sbrugna...

EUVD-2005-2003

Malware in sbrugna...

EUVD-2022-33049

Malicious code in bioql PyPI...

EUVD-2022-32871

Malicious code in bioql PyPI...

EUVD-2023-40283

Malicious code in bioql PyPI...

EUVD-2023-45305

Malicious code in bioql PyPI...

EUVD-2023-45304

Malicious code in bioql PyPI...

EUVD-2025-28375

Malicious code in bioql PyPI...

CVE-2025-10436

A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/supsearchfrm.php?action=edit. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-30064

An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to genera...

CVE-2025-30064

An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to genera...

CVE-2025-30064 Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key

An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to genera...

CVE-2025-30064 Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key

An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to genera...

CVE-2025-30064

Technical details about CVE-2025-30064 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories; current sources do not reveal affected products, versions, or remediation steps.