19515 matches found
PT-2025-40990
Name of the Vulnerable Software and Affected Versions Alert functionality affected versions not specified Description A SQL Injection issue exists due to inadequate input validation of a parameter within the Alert functionality. An authenticated user with limited privileges can execute arbitrary...
PT-2025-40989
Name of the Vulnerable Software and Affected Versions Alert functionality affected versions not specified Description A SQL Injection issue exists due to inadequate input validation. An authenticated user with limited privileges can execute arbitrary SQL statements, potentially leading to...
EUVD-2025-32855
CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...
Nozomi Networks Guardian/CMC SQL Injection Vulnerability
Nozomi Networks Guardian/CMC is a centralized management console from Nozomi Networks, Inc. in the United States. A SQL injection vulnerability exists in Nozomi Networks Guardian/CMC that stems from improper validation of input parameters in the Alert function, which could lead to an SQL injectio...
CVE-2025-57564
CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...
CVE-2025-57564
CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...
Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0
Summary A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. Impact An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing...
Phishers target 1Password users with convincing fake breach alert
In a very recent and well-targeted phishing attempt, scammers tried to get hold of the 1Password credentials belonging to a Malwarebytes’ employee. Stealing someone’s 1Password login would be like hitting the jackpot for cybercriminals, because they potentially export all the saved logins the...
CVE-2025-61766
creationtimestamp| type| source ---|---|--- 2025-10-06 17:14:33+00:00| seen| https://gist.github.com/Darkcrai86/d270f746cde80d5c549f234a0c9411ec...
EUVD-2025-32553
Malicious code in nileleetpkg npm...
EUVD-2023-56983
Malicious code in bioql PyPI...
EUVD-2025-17199
Malicious code in bioql PyPI...
EUVD-2022-45608
Malicious code in bioql PyPI...
EUVD-2023-30788
Malicious code in bioql PyPI...
EUVD-2024-37177
Malicious code in bioql PyPI...
EUVD-2024-37143
Malicious code in bioql PyPI...
EUVD-2024-37784
Malicious code in bioql PyPI...
EUVD-2024-26102
Malicious code in bioql PyPI...