2076 matches found
EUVD-2020-11171
Malware in sbrugna...
EUVD-2019-9242
Malware in sbrugna...
EUVD-2021-24697
Malware in sbrugna...
EUVD-2020-18801
Malware in sbrugna...
EUVD-2018-10551
Malware in sbrugna...
EUVD-2018-0087
Malware in sbrugna...
EUVD-2020-23245
Malware in sbrugna...
EUVD-2021-11297
Malware in sbrugna...
EUVD-2017-10006
Malware in sbrugna...
EUVD-2020-5557
Malware in sbrugna...
EUVD-2021-26232
Malware in sbrugna...
EUVD-2019-4782
Malware in sbrugna...
EUVD-2020-2712
Malware in sbrugna...
EUVD-2019-13597
Malware in sbrugna...
EUVD-2021-11750
Malware in sbrugna...
EUVD-2021-24609
Malware in sbrugna...
EUVD-2020-0047
Malware in sbrugna...
EUVD-2018-10714
Malware in sbrugna...
CVE-2025-10692 OpenSupports 4.11.0 — SQL Injection
The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...