796 matches found
PT-2025-47370
Name of the Vulnerable Software and Affected Versions Backdrop CMS version 1.32.1 Description A Host Header Injection flaw exists in Backdrop CMS. This issue allows attackers to manipulate the Host header within password reset requests. Successful exploitation can lead to redirection to malicious...
CVE-2025-63828: URL Redirection to Untrusted Site
Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leading to redirects to malicious domains and potential session hijacking via cookie injection...
CVE-2025-10649 Welcart e-Commerce <= 2.11.21 - Authenticated (Author+) SQL Injection via Cookie
The Welcart e-Commerce plugin for WordPress is vulnerable to SQL Injection via the cookie in all versions up to, and including, 2.11.21 due to insufficient escaping on the user supplied value and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated...
EUVD-2004-0870
Malware in sbrugna...
EUVD-2015-5787
Malware in sbrugna...
EUVD-2015-1370
Malware in sbrugna...
EUVD-2015-0760
Malware in sbrugna...
EUVD-2016-9460
Malware in sbrugna...
EUVD-2008-5092
Malware in sbrugna...
EUVD-2020-23257
Malware in sbrugna...
EUVD-2010-2298
Malware in sbrugna...
EUVD-2011-3936
Malware in sbrugna...
EUVD-2020-16373
Malware in sbrugna...
EUVD-2022-3855
Malicious code in bioql PyPI...
EUVD-2022-5845
Malicious code in bioql PyPI...
EUVD-2022-44204
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2016-5702
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpMyAdmin 4.6.x before 4.6.3, when the environment lacks a PHPSELF value, allows remote attackers to conduct cookie-attribute injection attacks via a crafted...
CVE-2025-2611
The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling. Versions 7.4 and below are know...
EUVD-2025-23629
The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling. Versions 7.4 and below are know...
