CVE-2026-40875 mailcow: dockerized vulnerable to stored XSS in user login history real_rip

mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, the user dashboard's "Seen successful connections" login history renders the client IP from login logs without HTML escaping. Because the server trusts the X-Real-IP header as the source IP...

CVE-2016-10942

The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has SQL injection via the insertid parameter exploitable via CSRF...

CVE-2019-20487

An issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the WNR1000V4 web management console are vulnerable to an unauthenticated GET request exploitable directly or through CSRF, as demonstrated by the setup.cgi?todo=savehtpaccount URI...

EUVD-2018-19439

Malware in sbrugna...

EUVD-2018-4500

Malware in sbrugna...

EUVD-2018-19438

Malware in sbrugna...

EUVD-2013-2501

Malware in sbrugna...

EUVD-2012-6145

Malware in sbrugna...

EUVD-2020-14766

Malware in sbrugna...

EUVD-2018-2872

Malware in sbrugna...

EUVD-2020-6551

Malware in sbrugna...

EUVD-2012-5584

Malware in sbrugna...

EUVD-2018-18684

Malware in sbrugna...

EUVD-2018-19437

Malware in sbrugna...

EUVD-2013-3449

Malware in sbrugna...

EUVD-2016-1933

Malware in sbrugna...

EUVD-2020-6553

Malware in sbrugna...

EUVD-2013-2030

Malware in sbrugna...

EUVD-2016-1932

Malware in sbrugna...

EUVD-2022-1888

Malicious code in bioql PyPI...