EUVD-2008-5408

Malware in sbrugna...

EUVD-1999-0653

Malware in sbrugna...

EUVD-1999-0362

Malware in sbrugna...

EUVD-1999-0201

Malware in sbrugna...

EUVD-1999-0931

Malware in sbrugna...

EUVD-2005-0313

Malware in sbrugna...

EUVD-2000-1179

Malware in sbrugna...

EUVD-2019-3176

Malware in sbrugna...

EUVD-2002-0126

Malware in sbrugna...

EUVD-2009-2822

Malware in sbrugna...

EUVD-2024-43495

Malicious code in bioql PyPI...

EUVD-2021-28649

Malicious code in bioql PyPI...

EUVD-2025-11762

Malicious code in bioql PyPI...

Codex has sandbox bypass due to bug in path configuration logic

Due to a bug in the sandbox configuration logic, Codex CLI could treat a model-generated cwd as the sandbox’s writable root, including paths outside of the folder where the user started their session. This logic bypassed the intended workspace boundary and enables arbitrary file writes and comman...

CVE-2010-20121

CVE-2010-20121 affects EasyFTP Server up to version 1.7.0.11. It describes a stack-based buffer overflow in the FTP CWD command parser, allowing remote code execution without authentication due to anonymous access by default. The flaw’s root cause is improper input length validation for CWD, lead...

CVE-2025-54794

Claude Code is an agentic coding tool. In versions below 0.2.111, a path validation flaw using prefix matching instead of canonical path comparison, makes it possible to bypass directory restrictions and access files outside the CWD. Successful exploitation depends on the presence of or ability t...

Claude Code Research Preview has a Path Restriction Bypass which could allow unauthorized file access

Due to a path validation flaw using prefix matching instead of canonical path comparison, it was possible to bypass directory restrictions and access files outside the CWD. Successful exploitation depends on the presence of or ability to create a directory with the same prefix as the CWD and the...

CVE-2025-28971

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CWD Web Designer Easy Elements Hider easy-elements-hider allows Stored XSS.This issue affects Easy Elements Hider: from n/a through = 2.0...

CVE-2025-28971

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CWD Web Designer Easy Elements Hider easy-elements-hider allows Stored XSS.This issue affects Easy Elements Hider: from n/a through = 2.0...

CVE-2025-28971

CVE-2025-28971 concerns the WordPress plugin Easy Elements Hider, where stored XSS is possible due to improper neutralization of input during web page generation. Affected: Easy Elements Hider versions up to 2.0 (no public fixed version details provided in the supplied documents). Impact is store...