642 matches found
EUVD-2025-197655
When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB object IDs to uniquely identify the data being requested by the caller. The Alteryx server did not check whether the authenticated user had permission to access the specified MongoDB object ID. By specifying...
CVE-2025-63291
When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB object IDs to uniquely identify the data being requested by the caller. The Alteryx server did not check whether the authenticated user had permission to access the specified MongoDB object ID. By specifying...
CVE-2025-63551
A Server-Side Request Forgery SSRF vulnerability, achievable through an XML External Entity XXE injection, exists in MetInfo Content Management System CMS thru 8.1. This flaw stems from a defect in the XML parsing logic, which allows an attacker to construct a malicious XML entity that forces the...
EUVD-2021-1993
Malware in sbrugna...
EUVD-2018-9995
Malware in sbrugna...
EUVD-2020-0607
Malware in sbrugna...
EUVD-2021-0581
Malware in sbrugna...
EUVD-2018-4383
Malware in sbrugna...
EUVD-2020-3025
Malware in sbrugna...
EUVD-2017-7993
Malware in sbrugna...
EUVD-2020-3402
Malware in sbrugna...
EUVD-2025-32450
A security flaw has been discovered in CRMEB up to 5.6. This issue affects some unknown processing of the file /adminapi/product/product of the component GET Parameter Handler. Performing manipulation of the argument cateid results in sql injection. Remote exploitation of the attack is possible...
CVE-2025-11288 CRMEB GET Parameter product sql injection
A security flaw has been discovered in CRMEB up to 5.6. This issue affects some unknown processing of the file /adminapi/product/product of the component GET Parameter Handler. Performing a manipulation of the argument cateid results in sql injection. Remote exploitation of the attack is possible...
EUVD-2025-11882
Malicious code in bioql PyPI...
EUVD-2023-0135
Malicious code in bioql PyPI...
EUVD-2022-6691
Malicious code in bioql PyPI...
EUVD-2024-29115
Malicious code in bioql PyPI...
EUVD-2022-34216
Malicious code in bioql PyPI...
CVE-2025-10433: Deserialization of Untrusted Data
A vulnerability was determined in 1Panel-dev MaxKB up to 2.0.2/2.1.0. This issue affects some unknown processing of the file /admin/api/workspace/default/tool/debug. Executing manipulation of the argument code can lead to deserialization. The attack can be executed remotely. The exploit has been...
CVE-2025-9591 ZrLog Theme Configuration Form config cross site scripting
A security vulnerability has been detected in ZrLog up to 3.1.5. This vulnerability affects unknown code of the file /api/admin/template/config of the component Theme Configuration Form. Such manipulation of the argument footerLink leads to cross site scripting. The attack may be launched remotel...