EUVD-2019-12414

Malware in sbrugna...

EUVD-2018-14552

Malware in sbrugna...

EUVD-2020-6734

Malware in sbrugna...

EUVD-2016-9173

Malware in sbrugna...

EUVD-2018-14511

Malware in sbrugna...

EUVD-2019-12157

Malware in sbrugna...

EUVD-2021-16664

Malware in sbrugna...

EUVD-2017-1929

Malware in sbrugna...

EUVD-2020-7011

Malware in sbrugna...

EUVD-2020-6794

Malware in sbrugna...

EUVD-2020-7012

Malware in sbrugna...

EUVD-2021-16814

Malware in sbrugna...

EUVD-2024-18785

Malicious code in bioql PyPI...

Security Advisory 0113

Security Advisory 0113 . CSAF PDF Date: April 8, 2025 Revision | Date | Changes ---|---|--- 1.0 | April 8, 2025 | Initial release The CVE-ID tracking this issue: CVE-2024-12378 CVSSv3.1 Base Score: 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Common Weakness Enumeration: CWE-319: Cleartext...

CVE-2020-14875

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2024-21071

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Admin Screens and Grants UI. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Workflow. Whi...

Critical Cacti Security Flaw (CVE-2025-22604) Enables Remote Code Execution

A critical security flaw has been disclosed in the Cacti open-source network monitoring and fault management framework that could allow an authenticated attacker to achieve remote code execution on susceptible instances. The flaw, tracked as CVE-2025-22604, carries a CVSS score of 9.1 out of a...

Wavlink AC3000 nas.cgi remove_dir() Command Injection Vulnerability

Talos Vulnerability Report TALOS-2024-2054 Wavlink AC3000 nas.cgi removedir Command Injection Vulnerability January 14, 2025 CVE Number CVE-2024-39360 SUMMARY An os command injection vulnerability exists in the nas.cgi removedir functionality of Wavlink AC3000 M33A8.V5030.210505. A specially...

Wavlink AC3000 nas.cgi set_ftp_cfg() Configuration Control Vulnerabilities

Talos Vulnerability Report TALOS-2024-2056 Wavlink AC3000 nas.cgi setftpcfg Configuration Control Vulnerabilities January 14, 2025 CVE Number CVE-2024-39788,CVE-2024-39790,CVE-2024-39789 SUMMARY Multiple external config control vulnerabilities exist in the nas.cgi setftpcfg functionality of Wavli...

Wavlink AC3000 adm.cgi set_TR069() buffer overflow vulnerability

Talos Vulnerability Report TALOS-2024-2029 Wavlink AC3000 adm.cgi setTR069 buffer overflow vulnerability January 14, 2025 CVE Number CVE-2024-37357 SUMMARY A buffer overflow vulnerability exists in the adm.cgi setTR069 functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP...