648 matches found
PT-2025-45386
Name of the Vulnerable Software and Affected Versions Jellysweep versions 0.12.1 and below Description Jellysweep is a cleanup tool for the Jellyfin media server. The /api/images/cache API endpoint accepts a URL parameter that is directly passed to a cache package, allowing the server to download...
CVE-2025-52757
CVE-2025-52757 affects the WordPress plugin Sumo Memberships for WooCommerce up to and including version 7.6.0. The issue is described as a Missing Authorization vulnerability caused by incorrectly configured access control, enabling unauthorized actions such as Arbitrary Content Deletion. The Re...
CVE-2025-10313 Find And Replace content for WordPress <= 1.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting
The Find And Replace content for WordPress plugin for WordPress is vulnerable to unauthorized Stored Cross-Site Scripting and Arbitrary Content Replacement due to a missing capability check on the faradminajaxfun function in all versions up to, and including, 1.1. This makes it possible for...
WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitrary Content Deletion vulnerability
Arbitrary Content Deletion vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin MasterStudy LMS Pro versions 4.7.16...
EUVD-2020-0249
Malware in sbrugna...
EUVD-2018-17290
Malware in sbrugna...
EUVD-2008-0711
Malware in sbrugna...
EUVD-2017-6489
Malware in sbrugna...
EUVD-2021-25547
Malware in sbrugna...
EUVD-2011-0018
Malware in sbrugna...
EUVD-2019-8597
Malware in sbrugna...
EUVD-2006-6054
Malware in sbrugna...
EUVD-2020-4424
Malware in sbrugna...
EUVD-2007-6493
Malware in sbrugna...
EUVD-2022-2020
Malicious code in bioql PyPI...
EUVD-2022-52803
Malicious code in bioql PyPI...
EUVD-2022-52802
Malicious code in bioql PyPI...
EUVD-2023-12303
Malicious code in bioql PyPI...