PT-2025-41764

Name of the Vulnerable Software and Affected Versions Kiloview NDI N30 versions prior to 2.02.0246 Description A broken authorization allows a remote, unauthenticated attacker to disable user verification, granting access to administrative actions. This impacts Kiloview NDI N30. Recommendations...

CVE-2025-11593

A flaw has been found in CodeAstro Gym Management System 1.0. This vulnerability affects unknown code of the file /admin/actions/delete-equipment.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2025-9621

The WidgetPack Comment System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.1. This is due to missing or incorrect nonce validation on the wpcmtsync action in the wpcmtrequesthandler function. This makes it possible for unauthenticated...

CVE-2025-11166

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Cross-Site Request Forgery CSRF in all versions up to, and including, 9.0.46. This is due to the plugin exposing state-changing REST actions through an AJAX bridge without proper CSRF token validation, and having...

EUVD-2025-33264

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to Cross-Site Request Forgery CSRF in all versions up to, and including, 9.0.46. This is due to the plugin exposing state-changing REST actions through an AJAX bridge without proper CSRF token validation, and having...

CVE-2025-61999

OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to upload JavaScript or other content embedded in an SVG image used as a logo. Injected content is executed in the context of other users when they view affected pages. Successful exploitation allows the administrative user to perfo...

PT-2025-41227

Name of the Vulnerable Software and Affected Versions Chartify – WordPress Chart Plugin versions prior to 3.5.9 Description The software contains a missing authentication check for a critical function. An unauthenticated AJAX action is registered, dispatching to admin-class methods based on a...

EUVD-2017-3772

Malware in sbrugna...

EUVD-2021-11378

Malware in sbrugna...

EUVD-2018-9939

Malware in sbrugna...

EUVD-2012-2911

Malware in sbrugna...

EUVD-2020-24671

Malware in sbrugna...

EUVD-2015-6898

Malware in sbrugna...

EUVD-2017-8978

Malware in sbrugna...

EUVD-2018-11196

Malware in sbrugna...

EUVD-2012-2422

Malware in sbrugna...

EUVD-2007-0918

Malware in sbrugna...

EUVD-2020-25858

Malware in sbrugna...

EUVD-2009-4537

Malware in sbrugna...

EUVD-2021-11993

Malware in sbrugna...