309 matches found
CVE-2025-61713
A Cleartext Storage of Sensitive Information in Memory vulnerability CWE-316 in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions may allow an authenticated...
Jenkins Publish to Bitbucket Plugin is missing a permissions check
Jenkins Publish to Bitbucket Plugin 0.4 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the...
CVE-2025-61417
Cross-Site Scripting XSS vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/mediamanager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their browser context, allowing the attacker to...
CVE-2025-58778
Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It is not documented in the manual, and enabled in the initial configuration. Anyone with the knowledge of the related credentials can log in to the affected device, leading to information disclosure,...
CVE-2025-61999 OPEXUS FOIAXpress stored XSS via logo image
OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to upload JavaScript or other content embedded in an SVG image used as a logo. Injected content is executed in the context of other users when they view affected pages. Successful exploitation allows the administrative user to perfo...
Exploit for CVE-2025-44823
Authenticated API Key Exposure in Nagios Log Server 2024R1.3.1...
Insufficiently Protected Credentials
Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the CrowdStrike connector. An attacker can obtain CrowdStrike credentials by accessing...
EUVD-2016-6692
Malware in sbrugna...
EUVD-2021-19361
Malware in sbrugna...
EUVD-2018-20668
Malware in sbrugna...
EUVD-2015-3340
Malware in sbrugna...
EUVD-2017-18252
Malware in sbrugna...
EUVD-2018-10526
Malware in sbrugna...
EUVD-2016-9976
Malware in sbrugna...
EUVD-2009-4268
Malware in sbrugna...
EUVD-2023-58812
Malicious code in bioql PyPI...
EUVD-2023-30064
Malicious code in bioql PyPI...
EUVD-2021-29304
Malicious code in bioql PyPI...