EUVD-2019-19116

Malware in sbrugna...

EUVD-2021-23962

Malware in sbrugna...

EUVD-2012-4448

Malware in sbrugna...

EUVD-2019-2126

Malware in sbrugna...

EUVD-2020-2698

Malware in sbrugna...

EUVD-2025-21864

Malicious code in bioql PyPI...

EUVD-2025-21863

Malicious code in bioql PyPI...

EUVD-2025-31808

Malicious code in bioql PyPI...

EUVD-2024-45692

Malicious code in bioql PyPI...

EUVD-2025-32304

Malicious code in bioql PyPI...

EUVD-2023-33179

Malicious code in bioql PyPI...

EUVD-2022-7323

Malicious code in bioql PyPI...

CVE-2025-57423

A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affecting the query parameters Content, GroupName, PersonName, lastUpdate, pool, and title. Due to insufficient input sanitisation, an unauthenticated remote attacker could inject arbitrary SQL commands via a...

CVE-2025-57423

A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affecting the query parameters Content, GroupName, PersonName, lastUpdate, pool, and title. Due to insufficient input sanitisation, an unauthenticated remote attacker could inject arbitrary SQL commands via a...

CVE-2025-57423

MyClub version 0.5 is susceptible to a SQL injection vulnerability in the /articles endpoint due to insufficient input sanitisation. An unauthenticated remote attacker can exploit this by sending a crafted GET request targeting the query parameters: Content, GroupName, PersonName, lastUpdate, poo...

CVE-2025-57423

A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affecting the query parameters Content, GroupName, PersonName, lastUpdate, pool, and title. Due to insufficient input sanitisation, an unauthenticated remote attacker could inject arbitrary SQL commands via a...

CVE-2025-57423

A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affecting the query parameters Content, GroupName, PersonName, lastUpdate, pool, and title. Due to insufficient input sanitisation, an unauthenticated remote attacker could inject arbitrary SQL commands via a...

CVE-2025-43826

Stored cross-site scripting XSS vulnerabilities in Web Content translation in Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allow remote...

CVE-2025-43826

Stored cross-site scripting XSS vulnerabilities in Web Content translation in Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allow remote...

Improper Access Control

contao/contao is vulnerable to Improper Access Control. The vulnerability is due to insufficient permission validation in certain conditions, which allows an attacker to edit fields of pages and articles without the necessary permissions...