CVE-2026-8637

A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authenticated user to execute arbitrary code with elevated privileges...

CVE-2026-11815

An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize arbitrary objects. This vulnerability could lead to broken security expectations or remote code execution...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write while decoding header names. An attacker can achieve memory corruption and potentially execute arbitrary code by sending specially crafted event-stream messages to a client application. Remediation A fix was pushed...

EUVD-2026-8840

Some HTTP security headers are not properly set by the web server when sending responses to the client application...

CVE-2026-1696

Some HTTP security headers are not properly set by the web server when sending responses to the client application...

CVE-2026-1696 Missing security HTTP headers

Some HTTP security headers are not properly set by the web server when sending responses to the client application...

PT-2026-22128

Name of the Vulnerable Software and Affected Versions Web Server affected versions not specified Description The web server is not properly setting certain HTTP security headers in its responses to client applications. This could potentially expose the system to various attacks. Approximately...

CVE-2023-45321

The Android Client application, when enrolled with the define method 1 the user manually inserts the server ip address, use HTTP protocol to retrieve sensitive information ip address and credentials to connect to a remote MQTT broker entity instead of HTTPS and this feature is not configurable by...

CVE-2021-31881

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303. When processing a DHCP OFFER message, the DHCP client application does not validate the length of the Vendor options, leading to Denial-of-Service...

EUVD-2025-201305

The password reset mechanism for the Pivot client application is weak, and it may allow an attacker to take over the account...

PT-2025-49157

Name of the Vulnerable Software and Affected Versions Pivot client application affected versions not specified Description The password reset mechanism is weak and could allow an attacker to take over an account. Recommendations At the moment, there is no information about a newer version that...

CVE-2025-10699

A vulnerability was reported in the Lenovo LeCloud client application that, under certain conditions, could allow information disclosure...

EUVD-2018-12592

Malware in sbrugna...

EUVD-2017-10251

Malware in sbrugna...

EUVD-2020-6384

Malware in sbrugna...

EUVD-2019-6677

Malware in sbrugna...

EUVD-2014-3511

Malicious code in bioql PyPI...

EUVD-2023-50363

Malicious code in bioql PyPI...

EUVD-2023-49024

Malicious code in bioql PyPI...

EUVD-2022-35608

Malicious code in bioql PyPI...