775 matches found
EUVD-2025-198625
A sensitive information disclosure vulnerability exists in the error handling component of ATISoluciones CIGES Application version 2.15.6 and earlier. When certain unexpected conditions trigger unhandled exceptions, the application returns detailed error messages and stack traces to the client...
PT-2025-47890
A sensitive information disclosure vulnerability exists in the error handling component of ATISoluciones CIGES Application version 2.15.6 and earlier. When certain unexpected conditions trigger unhandled exceptions, the application returns detailed error messages and stack traces to the client...
CVE-2025-60798
The web-based administration tool phpPgAdmin versions 7.13.0 and earlier is vulnerable to a SQL injection in the display.php script (line 396). The root cause is the lack of proper sanitization when user-controlled input from the $_REQUEST['query'] parameter is passed directly to the browseQuery ...
The vulnerability of the tax and accounting management tools for small and medium-sized enterprises in SAP Starter Solution (PL SAFT) lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL queries against the database.
The vulnerability of the tax management and accounting solution for small and medium-sized enterprises, SAP Starter Solution PL SAFT, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL querie...
Malicious Package
Overview SqlUnicornCoreTest is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023...
Malicious Package
Overview MCDbRepository is a malicious package. This package contains malicious code that injects time-delayed destructive payloads into database operations and target industrial control systems. Published under the NuGet alias shanhai666 together with 8 other malicious packages between 2023 and...
Improper Authorization
Overview doris-mcp-server is an Enterprise-grade Model Context Protocol MCP server implementation for Apache Doris Affected versions of this package are vulnerable to Improper Authorization via improper enforcement of access controls for SQL queries. An attacker can perform unauthorized...
WordPress Community Events plugin SQL Injection Vulnerability
The WordPress Community Events plugin is a plugin that allows users to publish event information independently through a website form, while administrators can retain the right to final review of calendar content. WordPress Community Events plugin suffers from a SQL injection vulnerability that...
WordPress dbview plugin cross-site scripting vulnerability
WordPress dbview plugin is a plugin for database query and display , developed by John Akers. The plugin through AJAX technology to achieve real-time query and dynamic display of database data , support for the direct execution of SQL statements and visual presentation of the results . WordPress...
EUVD-2020-27399
Malware in sbrugna...
EUVD-2019-1166
Malware in sbrugna...
EUVD-2020-28854
Malware in sbrugna...
EUVD-2020-28859
Malware in sbrugna...
EUVD-2019-11453
Malware in sbrugna...
EUVD-2019-0701
Malware in sbrugna...
EUVD-2018-13347
Malware in sbrugna...
EUVD-2018-13345
Malware in sbrugna...
EUVD-2018-13346
Malware in sbrugna...