CVE-2019-20519

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the user/ URI, as demonstrated by a crafted e-mail address...

EUVD-2020-6367

Malware in sbrugna...

EUVD-2014-6298

Malware in sbrugna...

EUVD-2018-7356

Malware in sbrugna...

EUVD-2013-4880

Malware in sbrugna...

EUVD-2019-14630

Malware in sbrugna...

EUVD-2006-5859

Malware in sbrugna...

EUVD-2021-16396

Malware in sbrugna...

EUVD-2022-2863

Malicious code in bioql PyPI...

EUVD-2025-13232

Malicious code in bioql PyPI...

PT-2025-26241 · Ubiquiti · Unifi Network Application

Name of the Vulnerable Software and Affected Versions: UniFi Network versions 9.1.120 and earlier Description: A misconfigured query in UniFi Network could allow users to authenticate to Enterprise WiFi or VPN Server l2tp and OpenVPN using a device’s MAC address from 802.1X or MAC Authentication,...

CVE-2024-39345

AdTran 834-5 HDC17600021F1 SmartOS 11.1.1.1 devices enable the SSH service by default and have a hidden, undocumented, hard-coded support account whose password is based on the devices MAC address. All of the devices internet interfaces share a similar MAC address that only varies in their final...

CVE-2021-22392

There is an Incorrect Calculation of Buffer Size in Huawei Smartphone.Successful exploitation of this vulnerability may cause verification bypass and directions to abnormal addresses...

CVE-2020-14214

Zammad before 3.3.1, when Domain Based Assignment is enabled, relies on a claimed e-mail address for authorization decisions. An attacker can register a new account that will have access to all tickets of an arbitrary Organization...

CVE-2019-17254

IrfanView 4.53 allows Data from a Faulting Address to control a subsequent Write Address starting at FORMATS!ReadBadPNG+0x0000000000000101...

CVE-2019-13150

An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi exploitable with authentication. The command injection exists in the key ipaddr...

CVE-2022-24860

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service background located at different IP address...

Mozilla Focus for iOS Spoofing Vulnerability

Mozilla Focus is a browser for iOS devices from the Mozilla Foundation. Mozilla Focus for iOS suffers from a spoofing vulnerability that is caused by an error related to the file scheme for hiding URLs. An attacker can exploit this vulnerability to spoof the address in the location bar...

Planet IGS-4215-16T2S IP address feature command injection vulnerability

The Planet IGS-4215-16T2S is an industrial grade switching device. The Planet IGS-4215-16T2S suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands on the host via the IP address...

PT-2024-2663 · Libcurl +2 · Libcurl +2

Name of the Vulnerable Software and Affected Versions: libcurl affected versions not specified Description: The issue is related to the implementation of TLS protocols in libcurl, where the server certificate is not checked when connecting to a host specified as an IP address, when built to use...