EUVD-2007-4805

Malware in sbrugna...

EUVD-2006-5726

Malware in sbrugna...

EUVD-2012-4829

Malware in sbrugna...

EUVD-2008-4108

Malware in sbrugna...

EUVD-2011-2346

Malware in sbrugna...

EUVD-2024-47209

Malicious code in bioql PyPI...

EUVD-2025-26810

Malicious code in bioql PyPI...

CVE-2024-6051

Cross Application Scripting vulnerability in Vercom S.A. Redlink SDK in specific situations allows local code injection and to manipulate the view of a vulnerable application.This issue affects Redlink SDK versions through 1.13...

CVE-2024-6051

Cross Application Scripting vulnerability in Vercom S.A. Redlink SDK in specific situations allows local code injection and to manipulate the view of a vulnerable application.This issue affects Redlink SDK versions through 1.13...

CVE-2024-6051 Cross Application Scripting in Redlink SDK

Cross Application Scripting vulnerability in Vercom S.A. Redlink SDK in specific situations allows local code injection and to manipulate the view of a vulnerable application.This issue affects Redlink SDK versions through 1.13...

CVE-2024-6051

CVE-2024-6051 : A Cross‑Site (Cross Application) Scripting vulnerability affects the Vercom S.A. Redlink SDK (versions through 1.13). The issue allows local code injection and manipulation of the vulnerable application’s view in certain conditions. Affected product/function: Redlink SDK by Vercom...

CVE-2024-6051 Cross Application Scripting in Redlink SDK

Cross Application Scripting vulnerability in Vercom S.A. Redlink SDK in specific situations allows local code injection and to manipulate the view of a vulnerable application.This issue affects Redlink SDK versions through 1.13...

PT-2024-37346 · Vercom S.A. · Redlink Sdk

Name of the Vulnerable Software and Affected Versions: Redlink SDK versions through 1.13 Description: A Cross Application Scripting vulnerability is present in Vercom S.A. Redlink SDK. In certain cases, it allows local code injection and manipulation of the view of a vulnerable application...

SAP Document Builder Code Issue Vulnerability

SAP Document Builder is a content-driven cross-application solution from SAP, Germany. A code issue vulnerability exists in SAP Document Builder that originates from an authenticated attacker being able to upload malicious files to the service that can be accessed, modified, or made unavailable i...

CVE-2023-35683

In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

SUSE CVE-2014-0119

Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to 1 read arbitrary files via a crafted web application that provides an XML external entity...

SUSE CVE-2017-5648

While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use the appropriate facade object. When running an untrusted application under a SecurityManager, it was...

GHSA-3VX3-XF6Q-R5XP Exposure of Resource to Wrong Sphere in Apache Tomcat

While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use the appropriate facade object. When running an untrusted application under a SecurityManager, it was...

in getgrav/grav

✍️ Description Developers often set cookies to be accessible from the root context path "/". Doing so exposes the cookie to all web applications on the domain. Since cookies often carry sensitive information such as session identifiers, sharing cookies across applications can lead a vulnerability...

Security Bulletin: Multiple vulnerabilities affecting the Cordova platform and IBM SDK Node.js packaged with Rational Software Architect and Rational Software Architect for WebSphere Software

Summary Multiple vulnerabilities have been discovered that affect the Cordova platform and IBM SDK Node.js packaged with Rational Software Architect and Rational Software Architect for WebSphere software CVE-2014-3500, CVE-2014-3501, CVE-2014-3502, CVE-2014-5256, CVE-2014-7191, CVE-2014-7192,...