EUVD-2004-0870

Malware in sbrugna...

EUVD-2008-5092

Malware in sbrugna...

EUVD-2020-23257

Malware in sbrugna...

EUVD-2010-2298

Malware in sbrugna...

EUVD-2020-16373

Malware in sbrugna...

EUVD-2011-3936

Malware in sbrugna...

EUVD-2022-3855

Malicious code in bioql PyPI...

EUVD-2022-44204

Malicious code in bioql PyPI...

EUVD-2022-5845

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2016-5702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpMyAdmin 4.6.x before 4.6.3, when the environment lacks a PHPSELF value, allows remote attackers to conduct cookie-attribute injection attacks via a crafted...

CVE-2025-2611

The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling. Versions 7.4 and below are know...

EUVD-2025-23629

The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling. Versions 7.4 and below are know...

CVE-2025-2611

ICTBroadcast

NewStart CGSL MAIN 7.02 : curl Multiple Vulnerabilities (NS-SA-2025-0111)

The remote NewStart CGSL host, running version MAIN 7.02, has curl packages installed that are affected by multiple vulnerabilities: - CVE-2023-38546 is a cookie injection vulnerability in the curleasyduphandle, a function in libcurl that duplicates easy handles. When duplicating an easy handle, ...

TencentOS Server 3: curl (TSSA-2024:0097)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0097 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2020-8261

A vulnerability in the Pulse Connect Secure / Pulse Policy Secure 9.1R9 is vulnerable to arbitrary cookie injection...

CVE-2020-23630

A blind SQL injection vulnerability exists in zzcms ver201910 based on time cookie injection...

CVE-2008-3397

Cross-site scripting XSS vulnerability in Runesoft Cerberus CMS before 31.40.9 allows remote attackers to inject arbitrary web script or HTML via a cerberususer cookie...

Improper Domain Validation

org.apache.httpcomponents.client5, httpclient5 is vulnerable to improper domain validation. The vulnerability is due to disabled domain checks where a bug in the PSL validation logic, affecting cookie management and host name verification, which allows an attacker to perform cookie injection or...

CVE-2025-2864

SaTECH BCU in its firmware version 2.1.3 allows an attacker to inject malicious code into the legitimate website owning the affected device, once the cookie is set. This attack only impacts the victim's browser reflected XSS...