EUVD-2002-0488

Malware in sbrugna...

EUVD-2019-2266

Malware in sbrugna...

EUVD-2007-5131

Malware in sbrugna...

EUVD-2007-1997

Malware in sbrugna...

EUVD-2007-3571

Malware in sbrugna...

EUVD-2025-29620

Malicious code in bioql PyPI...

EUVD-2025-24632

Malicious code in bioql PyPI...

EUVD-2022-53399

Malicious code in bioql PyPI...

EUVD-2025-29623

Malicious code in bioql PyPI...

CVE-2025-56276

code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting XSS in the registration function. An attacker enters malicious JavaScript code as a username, which triggers the XSS vulnerability when the admin views user information, resulting in the disclosure of the admin's...

CVE-2025-56276

code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting XSS in the registration function. An attacker enters malicious JavaScript code as a username, which triggers the XSS vulnerability when the admin views user information, resulting in the disclosure of the admin's...

CVE-2025-56276

The code-projects Food Ordering Review System 1.0 is vulnerable to a Cross-Site Scripting (XSS) attack due to a failure to validate user input in the registration function . An attacker can inject malicious JavaScript code as a username . When an administrator views the user information, the scri...

CVE-2025-56276: Improper Neutralization of Input During Web Page Generation

code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting XSS in the registration function. An attacker enters malicious JavaScript code as a username, which triggers the XSS vulnerability when the admin views user information, resulting in the disclosure of the admin's...

Linux Distros Unpatched Vulnerability : CVE-2022-35945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licens...

CVE-2025-43989

The /goform/formJsonAjaxReq POST endpoint of Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices mishandles the settimesetting action with the ntpserver0 parameter, which is used in a system command. By setting a username=admin cookie bypassing normal session checks, an...

CVE-2025-43989

The /goform/formJsonAjaxReq POST endpoint of Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices mishandles the settimesetting action with the ntpserver0 parameter, which is used in a system command. By setting a username=admin cookie bypassing normal session checks, an...

CVE-2025-43989

The Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLIC wireless router (version 3.4.2731.16.43 ) is vulnerable to OS command injection via the /goform/formJsonAjaxReq POST endpoint. The flaw exists because the set_timesetting action fails to properly neutralize the ntpserver0 parameter, which is utilize...

CVE-2025-43989

The /goform/formJsonAjaxReq POST endpoint of Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices mishandles the settimesetting action with the ntpserver0 parameter, which is used in a system command. By setting a username=admin cookie bypassing normal session checks, an...

CVE-2025-43989

The /goform/formJsonAjaxReq POST endpoint of Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices mishandles the settimesetting action with the ntpserver0 parameter, which is used in a system command. By setting a username=admin cookie bypassing normal session checks, an...

CVE-2024-27779

An insufficient session expiration vulnerability CWE-613 in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below, 4.0 all versions, 3.2 all versions and FortiIsolator version 2.4 and below, 2.3 all versions, 2.2 all versions, 2.1 all versions, 2.0 all versions, 1.2 all...