EUVD-2013-3442

Malware in sbrugna...

EUVD-2025-3150

Malicious code in bioql PyPI...

EUVD-2023-47434

Malicious code in bioql PyPI...

EUVD-2022-45980

Malicious code in bioql PyPI...

EUVD-2022-29708

Malicious code in bioql PyPI...

EUVD-2022-45979

Malicious code in bioql PyPI...

EUVD-2023-57354

Malicious code in bioql PyPI...

EUVD-2023-47435

Malicious code in bioql PyPI...

EUVD-2024-50733

Malicious code in bioql PyPI...

EUVD-2022-44865

Malicious code in bioql PyPI...

CVE-2025-58443

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a full SQL DB without credentials. A fix is...

CVE-2025-58443 FOG's authentication bypass leads to full SQL DB dump

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a full SQL DB without credentials. A fix is...

Exploit for CVE-2025-58443

CVE-2025-58443 exploit POC for https://github.com/FOGProject/...

FOG Access Control Vulnerability

FOG is an open source computer cloning and management system open-sourced by the FOG Project. An access control error vulnerability exists in FOG 1.5.10.1673 and prior versions, which stems from an authentication bypass that could allow an attacker to unauthenticatedly dump a full SQL database...

PT-2025-36400

Name of the Vulnerable Software and Affected Versions FOG versions 1.5.10.1673 and below Description FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass that allows an unauthenticated attacker to perfo...

Linux Distros Unpatched Vulnerability : CVE-2018-1000871

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HotelDruid HotelDruid 2.3.0 version 2.3.0 and earlier contains a SQL Injection vulnerability in idutentemod parameter in gestioneutenti.php file that can result...

CVE-2025-1708: Improper Neutralization of Special Elements used in an SQL Command

The application is vulnerable to SQL injection attacks. An attacker is able to dump the PostgreSQL database and read its content...

CVE-2024-51162

An issue in Audimex EE versions 15.1.20 and earlier allowing a remote attacker to escalate privileges. Analyzing the offline client code, it was identified that it is possible for any user with any privilege of Audimex to dump the whole Audimex database. This gives visibility upon password hashes...

CVE-2023-31702

SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution on database server via GetUserCurrentPwd?UsrId=1...

CVE-2023-6114

The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin before 4.5.14.2 does not disallow listing the backups-dup-lite/tmp directory or the backups-dup-pro/tmp directory in the Pro version, which temporarily stores files containing sensitive data. When directory listing is...