9638 matches found
CVE-2025-11440
A vulnerability was determined in JhumanJ OpnForm up to 1.9.3. Impacted is an unknown function of the file /edit. Executing manipulation can lead to improper access controls. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This patch is called...
netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions
A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...
CVE-2025-11440 JhumanJ OpnForm edit access control
A vulnerability was determined in JhumanJ OpnForm up to 1.9.3. Impacted is an unknown function of the file /edit. Executing manipulation can lead to improper access controls. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This patch is called...
PT-2025-41235
Name of the Vulnerable Software and Affected Versions JhumanJ OpnForm versions through 1.9.3 Description A flaw exists in JhumanJ OpnForm that could allow for improper access controls. The issue is related to manipulation of an unknown function within the /edit endpoint. The exploit has been...
Disrupting threats targeting Microsoft Teams
The extensive collaboration features and global adoption of Microsoft Teams make it a high-value target for both cybercriminals and state-sponsored actors. Threat actors abuse its core capabilities – messaging chat, calls and meetings, and video-based screen-sharing – at different points along th...
Disrupting threats targeting Microsoft Teams
The extensive collaboration features and global adoption of Microsoft Teams make it a high-value target for both cybercriminals and state-sponsored actors. Threat actors abuse its core capabilities – messaging chat, calls and meetings, and video-based screen-sharing – at different points along th...
Interpretation Conflict
Overview org.webjars.npm:nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Interpretation Conflict due to improper handling of quoted local-parts containing @. An attacker can cause emails to be sent to unintended...
EUVD-1999-1187
Malware in sbrugna...
EUVD-2004-1925
Malware in sbrugna...
EUVD-2008-2013
Malware in sbrugna...
EUVD-2016-7023
Malware in sbrugna...
EUVD-2017-8899
Malware in sbrugna...
EUVD-2017-2925
Malware in sbrugna...
EUVD-2017-18577
Malware in sbrugna...
EUVD-2018-5269
Malware in sbrugna...
EUVD-2018-5299
Malware in sbrugna...
EUVD-2019-5481
Malware in sbrugna...
EUVD-2021-23634
Malware in sbrugna...