EUVD-2002-0303

Malware in sbrugna...

EUVD-2006-2731

Malware in sbrugna...

EUVD-2008-6883

Malware in sbrugna...

EUVD-2003-0023

Malware in sbrugna...

EUVD-2017-15083

Malware in sbrugna...

EUVD-2007-5154

Malware in sbrugna...

EUVD-2020-19889

Malware in sbrugna...

EUVD-2010-1875

Malware in sbrugna...

EUVD-2020-2200

Malware in sbrugna...

EUVD-2014-5155

Malware in sbrugna...

EUVD-2014-8147

Malware in sbrugna...

EUVD-2023-58435

Malicious code in bioql PyPI...

EUVD-2022-47887

Malicious code in bioql PyPI...

SolarWinds TFTP Server Deserialization of Untrusted Data Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds TFTP Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the internal...

CVE-2025-41367 Stored Cross-Site Scripting (XSS) vulnerability in IDF and ZLF

Stored Cross-Site Scripting XSS vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious JavaScript payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and...

Fuji Electric V-SFT Buffer Overflow Vulnerability (CNVD-2025-12951)

Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. Fuji Electric V-SFT suffers from a buffer overflow vulnerability that originates in the settemptypedefault function in VS6MemInIF, which can be exploited by an attacker to cause a crash, information disclosure, and...

CVE-2024-46453

A cross-site scripting XSS vulnerability in the component /test/ of iq3xcite v2.31 to v3.05 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2020-27359

A cross-site scripting XSS issue in REDCap 8.11.6 through 9.x before 10 allows attackers to inject arbitrary JavaScript or HTML in the Messenger feature. It was found that the filename of the image or file attached in a message could be used to perform this XSS attack. A user could craft a messag...

CVE-2020-16227

Delta Electronics TPEditor Versions 1.97 and prior. An improper input validation may be exploited by processing a specially crafted project file not validated when the data is entered by a user. Successful exploitation of this vulnerability may allow an attacker to read/modify information, execut...

CVE-2011-4448

SQL injection vulnerability in actions/usersettings/usersettings.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to execute arbitrary SQL commands via the defaultcommentdisplay parameter in an update action...