EUVD-2026-47029

Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite component: Client System Analyzer. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-60670

Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite component: Client System Analyzer. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-60670: Improper Access Control

Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite component: Client System Analyzer. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-40987

A flaw was found in Spring Integration. A malicious or compromised FTP File Transfer Protocol, SFTP SSH File Transfer Protocol, or SMB Server Message Block server can exploit this vulnerability. This allows the server to write arbitrary files with attacker-controlled content to any location on th...

EUVD-2018-0013

Malware in sbrugna...

EUVD-2013-0388

Malware in sbrugna...

EUVD-2019-9487

Malware in sbrugna...

EUVD-2002-0889

Malware in sbrugna...

CVE-2025-58062: Improper Neutralization of Special Elements used in an OS Command

LSTM-Kirigaya's openmcp-client is a vscode plugin for mcp developer. Prior to version 0.1.12, when users on a Windows platform connect to an attacker controlled MCP server, attackers could provision a malicious authorization server endpoint to silently achieve an OS command injection attack in th...

CVE-2019-3999

Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, unauthenticated attacker to execute arbitrary operating system commands with SYSTEM privileges...

CVE-2022-3901

Prototype Pollution in Visioweb.js 1.10.6 allows attackers to execute XSS on the client system...

CVE-2024-39920

The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of one TCP connection from a client system to any server, when that client system is concurrently obtaining TCP data at a slow rate from an attacker-controlled server, aka the...

CVE-2022-3901

Prototype Pollution in Visioweb.js 1.10.6 allows attackers to execute XSS on the client system...

CVE-2022-3901 Visioweb.js - Prototype Pollution can results in XSS

Prototype Pollution in Visioweb.js 1.10.6 allows attackers to execute XSS on the client system...

CVE-2022-3901: Improperly Controlled Modification of Object Prototype Attributes

Prototype Pollution in Visioweb.js 1.10.6 allows attackers to execute XSS on the client system...

GHSA-3M8P-XPM6-8WW3 Ansible Arbitrary Code Execution

Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the ability to send facts back to the Ansible server, could use this flaw to execute arbitrary code on the...

Ansible Arbitrary Code Execution

Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the ability to send facts back to the Ansible server, could use this flaw to execute arbitrary code on the...

CVE-2021-41131

python-tuf is a Python reference implementation of The Update Framework TUF. In both clients tuf/client and tuf/ngclient, there is a path traversal vulnerability that in the worst case can overwrite files ending in .json anywhere on the client system on a call to getonevalidtargetinfo. It occurs...

Path traversal

python-tuf is a Python reference implementation of The Update Framework TUF. In both clients tuf/client and tuf/ngclient, there is a path traversal vulnerability that in the worst case can overwrite files ending in .json anywhere on the client system on a call to getonevalidtargetinfo. It occurs...

CVE-2020-0655

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker abuses clipboard redirection, aka ‘Remote Desktop Services Remote Code Execution Vulnerability’. Recent assessments: zeroSteiner at May 14, 2020 3:27...