Lucee Unset Credentials

Lucee web application server may be configured with no credentials. If an attacker setup the default accounts, they could gain unauthorized access to the application and perform arbitrary actions on it. No source data...

CVE-2025-63562

Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insufficient server-side authorization. Authenticated attackers can call several endpoints and perform create/update/delete actions on resources owned by arbitrary users by manipulating request parameters e.g.,...

EUVD-2025-34263

A Cross-Site Request Forgery CSRF in the component /endpoints/currency/currency of Wallos v4.1.1 allows attackers to execute arbitrary operations via a crafted GET request...

EUVD-2021-19929

Malware in sbrugna...

EUVD-2019-10215

Malware in sbrugna...

EUVD-2008-1255

Malware in sbrugna...

EUVD-2014-2367

Malware in sbrugna...

EUVD-2019-10495

Malware in sbrugna...

EUVD-2016-7391

Malware in sbrugna...

EUVD-2001-0712

Malware in sbrugna...

EUVD-2017-2498

Malware in sbrugna...

EUVD-2020-26466

Malware in sbrugna...

EUVD-2025-26610

Malicious code in bioql PyPI...

EUVD-2023-25656

Malicious code in bioql PyPI...

EUVD-2024-31698

Malicious code in bioql PyPI...

EUVD-2024-52763

Malicious code in bioql PyPI...

EUVD-2022-42882

Malicious code in bioql PyPI...

EUVD-2024-18136

Malicious code in bioql PyPI...

EUVD-2025-19185

Malicious code in bioql PyPI...

EUVD-2024-1060

Malicious code in bioql PyPI...