EUVD-2008-6629

Malware in sbrugna...

EUVD-2008-7246

Malware in sbrugna...

EUVD-2021-2887

Malicious code in bioql PyPI...

EUVD-2024-3185

Malicious code in bioql PyPI...

EUVD-2025-6987

Malicious code in bioql PyPI...

EUVD-2022-48740

Malicious code in bioql PyPI...

EUVD-2023-29919

Malicious code in bioql PyPI...

EUVD-2021-32630

Malicious code in bioql PyPI...

EUVD-2024-54409

Malicious code in bioql PyPI...

EUVD-2022-52454

Malicious code in bioql PyPI...

EUVD-2021-32120

Malicious code in bioql PyPI...

EUVD-2024-3188

Malicious code in bioql PyPI...

CVE-2025-10493

The Chained Quiz plugin for WordPress is vulnerable to Insecure Direct Object Reference in version 1.3.4 and below via the quiz submission and completion mechanisms due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to hijack and modify other...

Linux Distros Unpatched Vulnerability : CVE-2022-23485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sentry is an error tracking and performance monitoring platform. In versions of the sentry python library prior to 22.11.0 an attacker with a known valid invite...

VulnCheck KEV: CVE-2025-34057

An information disclosure vulnerability exists in Ruijie NBR series routers known to affect NBR2000G, NBR1300G, and NBR1000 models via the /WEBVMS/LEVEL15/ endpoint. By crafting a specific POST request with modified Cookie headers and specially formatted parameters, an unauthenticated attacker ca...

Sitecom WLX-2006 Wall Mount Range Extender N300 跨站脚本漏洞

The Sitecom WLX-2006 Wall Mount Range Extender N300 is a wall mount range extender from Sitecom. A security vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and earlier versions, which stems from improper manipulation of a language cookie and could lead to a cross-site...

CVE-2024-40114

A Cross Site Scripting XSS vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an attacker to manipulate the language cookie to inject malicious JavaScript code...

CVE-2024-45384

Padding Oracle vulnerability in Apache Druid extension, druid-pac4j. This could allow an attacker to manipulate a pac4j session cookie. This issue affects Apache Druid versions 0.18.0 through 30.0.0. Since the druid-pac4j extension is optional and disabled by default, Druid installations not usin...

CVE-2024-55556

A vulnerability in Crater Invoice allows an unauthenticated attacker with knowledge of the APPKEY to achieve remote command execution on the server by manipulating the laravelsession cookie, exploiting arbitrary deserialization through the encrypted session data. The exploitation vector of this...

CVE-2024-26331

ReCrystallize Server 5.10.0.0 uses a authorization mechanism that relies on the value of a cookie, but it does not bind the cookie value to a session ID. Attackers can easily modify the cookie value, within a browser or by implementing client-side code outside of a browser. Attackers can bypass t...